last executing test programs: 40.650210263s ago: executing program 1 (id=1178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 40.207920888s ago: executing program 1 (id=1179): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) 39.830478289s ago: executing program 1 (id=1180): setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000001c0)="97e90fe268ace9f3d08fd8d17457e933", 0x10) 17.200691826s ago: executing program 0 (id=1184): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) 16.96069116s ago: executing program 0 (id=1185): setfsgid(0xee00) mkdir(&(0x7f0000000180)='./file0\x00', 0x163) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff8000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7f, 0x0, {0x5, 0x20000000000000, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x4, 0xa000, 0x10000, 0x0, r2, 0x734, 0x200000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.310362381s ago: executing program 0 (id=1186): r0 = socket$netlink(0x10, 0x3, 0x10) unshare(0x22020600) bind$netlink(r0, 0x0, 0x0) 13.999981299s ago: executing program 0 (id=1187): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000110001"], 0x20}}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r2, 0x10886}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x10820, 0x343}}}}}}]}, 0x48}}, 0x0) 13.600854612s ago: executing program 0 (id=1188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) close(r6) 1.859529164s ago: executing program 1 (id=1189): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) 1.520236254s ago: executing program 1 (id=1190): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) userfaultfd(0x801) socket$inet(0x2, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 700.31857ms ago: executing program 1 (id=1191): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 0s ago: executing program 0 (id=1192): syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r4, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044853}, 0x20000454) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r6}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7, 0x0, 0x3}, 0x18) kernel console output (not intermixed with test programs): uld_fail_ex+0x1c4/0x228) [ 353.132439][ T6318] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 353.132471][ T6318] r8:76ba8f30 r7:00000000 r6:00000000 r5:ed455f68 r4:00000002 [ 353.132478][ T6318] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 353.132504][ T6318] [<8095f694>] (should_fail_usercopy) from [<8058cc58>] (simple_read_from_buffer+0x80/0x13c) [ 353.132554][ T6318] [<8058cbd8>] (simple_read_from_buffer) from [<806041f0>] (proc_fail_nth_read+0xb8/0x100) [ 353.132594][ T6318] r10:00000001 r9:80604138 r8:00000002 r7:ed455f68 r6:0000000f r5:76ba8f30 [ 353.132626][ T6318] r4:8398c800 r3:ed455e9f [ 353.132636][ T6318] [<80604138>] (proc_fail_nth_read) from [<805517a0>] (vfs_read+0x98/0x320) [ 353.132672][ T6318] r8:76ba8f30 r7:ed455f68 r6:8398c800 r5:0000000f r4:85735cc0 [ 353.132680][ T6318] [<80551708>] (vfs_read) from [<80552440>] (ksys_read+0x74/0xe4) [ 353.132713][ T6318] r10:00000003 r9:8398c800 r8:8020029c r7:00000000 r6:00000000 r5:85735cc0 [ 353.132723][ T6318] r4:85735cc3 [ 353.132730][ T6318] [<805523cc>] (ksys_read) from [<805524c0>] (sys_read+0x10/0x14) [ 353.132760][ T6318] r7:00000003 r6:00000004 r5:76ba8f30 r4:0000000f [ 353.132776][ T6318] [<805524b0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 353.132824][ T6318] Exception stack(0xed455fa8 to 0xed455ff0) [ 353.132846][ T6318] 5fa0: 0000000f 76ba8f30 00000004 76ba8f30 0000000f 00000000 [ 353.132864][ T6318] 5fc0: 0000000f 76ba8f30 00000004 00000003 002d0000 00000000 00006364 76ba90bc [ 353.132877][ T6318] 5fe0: 00000158 76ba8ed0 000d7d68 0012fe04 [ 354.329210][ T31] audit: type=1400 audit(354.260:282): avc: denied { ioctl } for pid=6330 comm="syz.0.614" path="socket:[9558]" dev="sockfs" ino=9558 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 354.885539][ T6339] FAULT_INJECTION: forcing a failure. [ 354.885539][ T6339] name failslab, interval 1, probability 0, space 0, times 0 [ 354.886029][ T6339] CPU: 1 UID: 0 PID: 6339 Comm: syz.0.618 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 354.886146][ T6339] Hardware name: ARM-Versatile Express [ 354.886178][ T6339] Call trace: [ 354.886244][ T6339] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 354.886366][ T6339] r7:00000d40 r6:00000000 r5:60000013 r4:82257d0c [ 354.886386][ T6339] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 354.886468][ T6339] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 354.886537][ T6339] r5:8398e000 r4:8291bcc0 [ 354.886558][ T6339] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 354.886622][ T6339] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 354.886694][ T6339] r8:8398e000 r7:00000d40 r6:857359e8 r5:00000018 r4:83001240 [ 354.886716][ T6339] [<80525620>] (should_failslab) from [<8050a480>] (__kmalloc_noprof+0x9c/0x458) [ 354.886776][ T6339] [<8050a3e4>] (__kmalloc_noprof) from [<807bc1b4>] (tomoyo_encode2+0x64/0xf0) [ 354.886857][ T6339] r10:00000fff r9:83351000 r8:00000000 r7:83689b28 r6:857359e8 r5:85048ffd [ 354.886877][ T6339] r4:85048ff0 [ 354.886893][ T6339] [<807bc150>] (tomoyo_encode2) from [<807bc264>] (tomoyo_encode+0x24/0x30) [ 354.886962][ T6339] r9:83351000 r8:00000000 r7:83689b28 r6:857359e8 r5:00001000 r4:85048ff1 [ 354.886978][ T6339] [<807bc240>] (tomoyo_encode) from [<807bc2f0>] (tomoyo_realpath_from_path+0x80/0x17c) [ 354.887041][ T6339] r5:00001000 r4:85048000 [ 354.887060][ T6339] [<807bc270>] (tomoyo_realpath_from_path) from [<807b83f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 354.887139][ T6339] r10:8398e000 r9:00000000 r8:857359c0 r7:00008983 r6:00000004 r5:81cd56c4 [ 354.887167][ T6339] r4:857359e8 r3:826c0240 [ 354.887183][ T6339] [<807b8324>] (tomoyo_path_number_perm) from [<807bccd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 354.887254][ T6339] r9:00000003 r8:857359c0 r7:20000000 r6:20000000 r5:00008983 r4:857359c0 [ 354.887274][ T6339] [<807bccb4>] (tomoyo_file_ioctl) from [<8076a70c>] (security_file_ioctl+0x64/0x1e4) [ 354.887337][ T6339] [<8076a6a8>] (security_file_ioctl) from [<8056b32c>] (sys_ioctl+0x4c/0xd84) [ 354.887400][ T6339] r7:20000000 r6:857359c1 r5:00000000 r4:00008983 [ 354.887419][ T6339] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 354.887472][ T6339] Exception stack(0xed4d5fa8 to 0xed4d5ff0) [ 354.887518][ T6339] 5fa0: 00000000 00000000 00000003 00008983 20000000 00000000 [ 354.887561][ T6339] 5fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76bca0bc [ 354.887591][ T6339] 5fe0: 76bc9ec0 76bc9eb0 0001939c 00131f30 [ 354.887633][ T6339] r10:00000036 r9:8398e000 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 354.887656][ T6339] r4:00000000 [ 354.887772][ T6339] ERROR: Out of memory at tomoyo_realpath_from_path. [ 356.094585][ T6352] fuse: Unknown parameter 'fdށ' [ 356.287447][ T31] audit: type=1400 audit(356.220:283): avc: denied { setopt } for pid=6353 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 362.209511][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 362.428122][ T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 362.430387][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.430766][ T9] usb 2-1: Product: syz [ 362.430995][ T9] usb 2-1: Manufacturer: syz [ 362.431220][ T9] usb 2-1: SerialNumber: syz [ 362.445136][ T9] usb 2-1: config 0 descriptor?? [ 362.463254][ T9] ch341 2-1:0.0: ch341-uart converter detected [ 363.235679][ T31] audit: type=1400 audit(363.170:284): avc: denied { watch watch_reads } for pid=6426 comm="syz.1.645" path="/251" dev="tmpfs" ino=1354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 363.350895][ T9] usb 2-1: failed to receive control message: -71 [ 363.351509][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 363.356347][ T9] usb 2-1: USB disconnect, device number 29 [ 363.359663][ T9] ch341 2-1:0.0: device disconnected [ 363.491640][ T6452] FAULT_INJECTION: forcing a failure. [ 363.491640][ T6452] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 363.492642][ T6452] CPU: 0 UID: 0 PID: 6452 Comm: syz.0.648 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 363.492702][ T6452] Hardware name: ARM-Versatile Express [ 363.492714][ T6452] Call trace: [ 363.492744][ T6452] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 363.492804][ T6452] r7:00000000 r6:00000000 r5:60000013 r4:82257d0c [ 363.492814][ T6452] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 363.492842][ T6452] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 363.492872][ T6452] r5:83b98000 r4:8291bd14 [ 363.492880][ T6452] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 363.492909][ T6452] [<8095f454>] (should_fail_ex) from [<8052571c>] (should_fail_alloc_page+0x68/0x74) [ 363.492947][ T6452] r8:00000001 r7:00000000 r6:00000000 r5:00140cca r4:ed70ddf0 [ 363.492955][ T6452] [<805256b4>] (should_fail_alloc_page) from [<804f445c>] (prepare_alloc_pages.constprop.0+0x94/0x1b4) [ 363.492985][ T6452] [<804f43c8>] (prepare_alloc_pages.constprop.0) from [<804fc3a0>] (__alloc_frozen_pages_noprof+0xb8/0x1138) [ 363.493022][ T6452] r10:ed70dfb0 r9:00000000 r8:00140cca r7:00000040 r6:76bc7df8 r5:83b98000 [ 363.493041][ T6452] r4:00000000 r3:ed70ddf0 [ 363.493049][ T6452] [<804fc2e8>] (__alloc_frozen_pages_noprof) from [<804fd494>] (__folio_alloc_noprof+0x14/0x6c) [ 363.493087][ T6452] r10:ed70dfb0 r9:855c8800 r8:00000000 r7:00000040 r6:76bc7df8 r5:83b98000 [ 363.493097][ T6452] r4:00001255 [ 363.493104][ T6452] [<804fd480>] (__folio_alloc_noprof) from [<804cf120>] (handle_mm_fault+0xd00/0x14e4) [ 363.493138][ T6452] r5:83b98000 r4:00001255 [ 363.493146][ T6452] [<804ce420>] (handle_mm_fault) from [<802342d0>] (do_page_fault+0x1c8/0x49c) [ 363.493205][ T6452] r10:00000002 r9:8452f600 r8:00000255 r7:83b98000 r6:00000a07 r5:76bc7df8 [ 363.493216][ T6452] r4:ed70dfb0 [ 363.493223][ T6452] [<80234108>] (do_page_fault) from [<8023478c>] (do_DataAbort+0x38/0xa8) [ 363.493258][ T6452] r10:00006364 r9:00000000 r8:80234108 r7:ed70dfb0 r6:76bc7df8 r5:00000a07 [ 363.493268][ T6452] r4:8281d170 [ 363.493275][ T6452] [<80234754>] (do_DataAbort) from [<80200ebc>] (__dabt_usr+0x5c/0x60) [ 363.493300][ T6452] Exception stack(0xed70dfb0 to 0xed70dff8) [ 363.493318][ T6452] dfa0: 00189a18 20000000 0000002d 76bc9e98 [ 363.493336][ T6452] dfc0: 00022cf4 00000003 20000000 0000002d 00000003 00000000 00006364 76bca0bc [ 363.493352][ T6452] dfe0: 200003c0 76bc7e08 00022138 000139c4 20000010 ffffffff [ 363.493369][ T6452] r8:826b7044 r7:83b98000 r6:ffffffff r5:20000010 r4:000139c4 [ 363.493821][ T6452] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 363.729451][ T109] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 363.809324][ T1784] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 363.893544][ T109] usb 1-1: unable to get BOS descriptor or descriptor too short [ 363.896276][ T109] usb 1-1: config 1 interface 0 altsetting 55 bulk endpoint 0x1 has invalid maxpacket 1024 [ 363.896838][ T109] usb 1-1: config 1 interface 0 has no altsetting 0 [ 363.901517][ T109] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 363.902025][ T109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.902486][ T109] usb 1-1: Product: syz [ 363.902821][ T109] usb 1-1: Manufacturer: syz [ 363.903174][ T109] usb 1-1: SerialNumber: syz [ 363.907890][ T6452] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 363.990344][ T1784] usb 2-1: unable to get BOS descriptor or descriptor too short [ 363.993175][ T1784] usb 2-1: config 1 interface 0 altsetting 55 bulk endpoint 0x1 has invalid maxpacket 1024 [ 363.993428][ T1784] usb 2-1: config 1 interface 0 has no altsetting 0 [ 364.001800][ T1784] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 364.002013][ T1784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.002338][ T1784] usb 2-1: Product: syz [ 364.002380][ T1784] usb 2-1: Manufacturer: syz [ 364.002410][ T1784] usb 2-1: SerialNumber: syz [ 364.008219][ T6457] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 364.122789][ T109] usb 1-1: USB disconnect, device number 19 [ 364.234450][ T1784] usb 2-1: USB disconnect, device number 30 [ 365.519133][ T31] audit: type=1400 audit(365.450:285): avc: denied { create } for pid=6500 comm="syz.0.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 370.296334][ T31] audit: type=1400 audit(370.230:286): avc: denied { mount } for pid=6540 comm="syz.0.666" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 370.351234][ T31] audit: type=1400 audit(370.280:287): avc: denied { unmount } for pid=3097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 370.562551][ T6545] FAULT_INJECTION: forcing a failure. [ 370.562551][ T6545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.562799][ T6545] CPU: 1 UID: 0 PID: 6545 Comm: syz.0.668 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 370.562831][ T6545] Hardware name: ARM-Versatile Express [ 370.562843][ T6545] Call trace: [ 370.562862][ T6545] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 370.562945][ T6545] r7:00000000 r6:00000000 r5:60000013 r4:82257d0c [ 370.562957][ T6545] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 370.563010][ T6545] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 370.563080][ T6545] r5:83b85400 r4:82951710 [ 370.563095][ T6545] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 370.563157][ T6545] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 370.563242][ T6545] r8:76bc9f30 r7:00000000 r6:00000000 r5:edc7df68 r4:00000002 [ 370.563263][ T6545] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 370.563337][ T6545] [<8095f694>] (should_fail_usercopy) from [<8058cc58>] (simple_read_from_buffer+0x80/0x13c) [ 370.563417][ T6545] [<8058cbd8>] (simple_read_from_buffer) from [<806041f0>] (proc_fail_nth_read+0xb8/0x100) [ 370.563507][ T6545] r10:00000001 r9:80604138 r8:00000002 r7:edc7df68 r6:0000000f r5:76bc9f30 [ 370.563535][ T6545] r4:83b85400 r3:edc7de9f [ 370.563581][ T6545] [<80604138>] (proc_fail_nth_read) from [<805517a0>] (vfs_read+0x98/0x320) [ 370.563688][ T6545] r8:76bc9f30 r7:edc7df68 r6:83b85400 r5:0000000f r4:85731f00 [ 370.563720][ T6545] [<80551708>] (vfs_read) from [<80552440>] (ksys_read+0x74/0xe4) [ 370.563790][ T6545] r10:00000003 r9:83b85400 r8:8020029c r7:00000000 r6:00000000 r5:85731f00 [ 370.563827][ T6545] r4:85731f03 [ 370.563846][ T6545] [<805523cc>] (ksys_read) from [<805524c0>] (sys_read+0x10/0x14) [ 370.563910][ T6545] r7:00000003 r6:00000005 r5:76bc9f30 r4:0000000f [ 370.563928][ T6545] [<805524b0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 370.563993][ T6545] Exception stack(0xedc7dfa8 to 0xedc7dff0) [ 370.564046][ T6545] dfa0: 0000000f 76bc9f30 00000005 76bc9f30 0000000f 00000000 [ 370.564086][ T6545] dfc0: 0000000f 76bc9f30 00000005 00000003 002d0000 00000000 00006364 76bca0bc [ 370.564133][ T6545] dfe0: 00000158 76bc9ed0 000d7d68 0012fe04 [ 370.883108][ T31] audit: type=1400 audit(370.820:288): avc: denied { module_request } for pid=6555 comm="syz.1.671" kmod="net-pf-16-proto-16-family-IPVS" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 370.950753][ T31] audit: type=1400 audit(370.890:289): avc: denied { create } for pid=6555 comm="syz.1.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 370.999312][ T9] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 371.173086][ T9] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.173494][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 371.183415][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 371.184017][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.185232][ T9] usb 1-1: Product: syz [ 371.186081][ T9] usb 1-1: Manufacturer: syz [ 371.186879][ T9] usb 1-1: SerialNumber: syz [ 371.402062][ T9] usb 1-1: USB disconnect, device number 20 [ 371.410090][ T11] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 371.549627][ T6574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6574 comm=syz.0.674 [ 371.557486][ T6575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6575 comm=syz.0.674 [ 371.612169][ T11] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 371.612399][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.612570][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.612688][ T11] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 371.616798][ T11] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 371.616962][ T11] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 371.617127][ T11] usb 2-1: Manufacturer: syz [ 371.631736][ T11] usb 2-1: config 0 descriptor?? [ 371.719372][ T31] audit: type=1400 audit(371.650:290): avc: denied { read } for pid=6578 comm="syz.0.675" path="socket:[8917]" dev="sockfs" ino=8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 371.969319][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 372.146003][ T9] usb 1-1: config 0 has no interfaces? [ 372.163916][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 372.165106][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.167841][ T9] usb 1-1: Product: syz [ 372.170922][ T9] usb 1-1: Manufacturer: syz [ 372.173005][ T9] usb 1-1: SerialNumber: syz [ 372.189367][ T9] usb 1-1: config 0 descriptor?? [ 372.400702][ T9] usb 1-1: USB disconnect, device number 21 [ 372.462048][ T11] usbhid 2-1:0.0: can't add hid device: -71 [ 372.462501][ T11] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 372.466809][ T11] usb 2-1: USB disconnect, device number 31 [ 372.582798][ T31] audit: type=1400 audit(372.520:291): avc: denied { create } for pid=6597 comm="syz.0.676" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 372.739263][ T31] audit: type=1400 audit(372.670:292): avc: denied { ioctl } for pid=6599 comm="syz.1.677" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8924 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 377.406396][ T31] audit: type=1400 audit(377.340:293): avc: denied { read } for pid=6617 comm="syz.1.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 377.971964][ T31] audit: type=1400 audit(377.910:294): avc: denied { kexec_image_load } for pid=6626 comm="syz.0.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 378.064214][ T31] audit: type=1400 audit(378.000:295): avc: denied { create } for pid=6626 comm="syz.0.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 378.301732][ T6638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=6638 comm=syz.0.688 [ 378.402278][ T6640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=371 sclass=netlink_route_socket pid=6640 comm=syz.0.689 [ 385.364233][ T6682] FAULT_INJECTION: forcing a failure. [ 385.364233][ T6682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.364487][ T6682] CPU: 0 UID: 0 PID: 6682 Comm: syz.0.698 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 385.364521][ T6682] Hardware name: ARM-Versatile Express [ 385.364534][ T6682] Call trace: [ 385.364553][ T6682] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 385.364654][ T6682] r7:00c00000 r6:00000000 r5:60000113 r4:82257d0c [ 385.364667][ T6682] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 385.364698][ T6682] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 385.364728][ T6682] r5:83ab6000 r4:82951710 [ 385.364750][ T6682] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 385.364785][ T6682] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 385.364829][ T6682] r8:00000000 r7:00c00000 r6:00003000 r5:edf3ded0 r4:00001000 [ 385.364840][ T6682] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 385.364867][ T6682] [<8095f694>] (should_fail_usercopy) from [<808ad22c>] (copy_page_from_iter_atomic+0x270/0xb6c) [ 385.364909][ T6682] [<808acfbc>] (copy_page_from_iter_atomic) from [<80472bcc>] (generic_perform_write+0x80/0x2c8) [ 385.364980][ T6682] r10:836cb288 r9:81ccd558 r8:00001000 r7:00001000 r6:00003000 r5:00000000 [ 385.364992][ T6682] r4:00000000 [ 385.365000][ T6682] [<80472b4c>] (generic_perform_write) from [<8047a3c8>] (__generic_file_write_iter+0x98/0xa4) [ 385.365043][ T6682] r10:85465400 r9:836cb180 r8:83ab6000 r7:edf3ded0 r6:857316c0 r5:edf3de58 [ 385.365156][ T6682] r4:00000000 [ 385.365248][ T6682] [<8047a330>] (__generic_file_write_iter) from [<8047a438>] (generic_file_write_iter+0x64/0x130) [ 385.365288][ T6682] r7:edf3ded0 r6:836cb200 r5:00056000 r4:edf3de58 [ 385.365296][ T6682] [<8047a3d4>] (generic_file_write_iter) from [<80737934>] (fuse_file_write_iter+0x2e8/0x45c) [ 385.365331][ T6682] r7:857316c0 r6:edf3ded0 r5:edf3de58 r4:00000000 [ 385.365371][ T6682] [<8073764c>] (fuse_file_write_iter) from [<8054fa74>] (do_iter_readv_writev+0x130/0x214) [ 385.365413][ T6682] r10:00000006 r9:83ab6000 r8:00000001 r7:00000000 r6:00000000 r5:857316c0 [ 385.365422][ T6682] r4:00000000 [ 385.365429][ T6682] [<8054f944>] (do_iter_readv_writev) from [<80550cd8>] (vfs_writev+0x134/0x3bc) [ 385.365465][ T6682] r10:00000092 r9:00000001 r8:83ab6000 r7:00000000 r6:857316c0 r5:8073764c [ 385.365474][ T6682] r4:8563d800 [ 385.365518][ T6682] [<80550ba4>] (vfs_writev) from [<80551078>] (do_writev+0x118/0x144) [ 385.365554][ T6682] r9:00000001 r8:20000000 r7:857316c0 r6:857316c1 r5:00000000 r4:83ab6000 [ 385.365562][ T6682] [<80550f60>] (do_writev) from [<80552878>] (sys_writev+0x14/0x18) [ 385.365596][ T6682] r9:83ab6000 r8:8020029c r7:00000092 r6:0012fee0 r5:00000000 r4:00000000 [ 385.365604][ T6682] [<80552864>] (sys_writev) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 385.365629][ T6682] Exception stack(0xedf3dfa8 to 0xedf3dff0) [ 385.365650][ T6682] dfa0: 00000000 00000000 00000005 20000000 00000001 00000000 [ 385.365667][ T6682] dfc0: 00000000 00000000 0012fee0 00000092 002d0000 00000000 00006364 76bca0bc [ 385.365680][ T6682] dfe0: 76bc9ec0 76bc9eb0 0001939c 00131f30 [ 385.751981][ T6690] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1107 sclass=netlink_tcpdiag_socket pid=6690 comm=syz.0.700 [ 385.909826][ T31] audit: type=1400 audit(385.820:296): avc: denied { mounton } for pid=6695 comm="syz.0.702" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 386.334331][ T6699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6699 comm=syz.1.703 [ 389.372041][ T6726] FAULT_INJECTION: forcing a failure. [ 389.372041][ T6726] name failslab, interval 1, probability 0, space 0, times 0 [ 389.372481][ T6726] CPU: 0 UID: 0 PID: 6726 Comm: syz.1.713 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 389.372566][ T6726] Hardware name: ARM-Versatile Express [ 389.372595][ T6726] Call trace: [ 389.372632][ T6726] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 389.372734][ T6726] r7:00000d40 r6:00000000 r5:60000013 r4:82257d0c [ 389.372783][ T6726] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 389.372851][ T6726] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 389.372909][ T6726] r5:83b7d400 r4:8291bcc0 [ 389.372924][ T6726] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 389.372981][ T6726] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 389.373112][ T6726] r8:83b7d400 r7:00000d40 r6:855c41a8 r5:00000011 r4:83001240 [ 389.373143][ T6726] [<80525620>] (should_failslab) from [<8050a480>] (__kmalloc_noprof+0x9c/0x458) [ 389.373282][ T6726] [<8050a3e4>] (__kmalloc_noprof) from [<807bc1b4>] (tomoyo_encode2+0x64/0xf0) [ 389.373370][ T6726] r10:00000fff r9:8563c800 r8:00000000 r7:836822a8 r6:855c41a8 r5:84d88ffc [ 389.373390][ T6726] r4:84d88ff6 [ 389.373406][ T6726] [<807bc150>] (tomoyo_encode2) from [<807bc264>] (tomoyo_encode+0x24/0x30) [ 389.373476][ T6726] r9:8563c800 r8:00000000 r7:836822a8 r6:855c41a8 r5:00001000 r4:84d88ff7 [ 389.373491][ T6726] [<807bc240>] (tomoyo_encode) from [<807bc2f0>] (tomoyo_realpath_from_path+0x80/0x17c) [ 389.373551][ T6726] r5:00001000 r4:84d88000 [ 389.373568][ T6726] [<807bc270>] (tomoyo_realpath_from_path) from [<807b86a0>] (tomoyo_check_open_permission+0x150/0x1c0) [ 389.373652][ T6726] r10:855c4180 r9:00000002 r8:84de6dc0 r7:00000101 r6:00000000 r5:855c41a8 [ 389.373678][ T6726] r4:00000001 r3:00000001 [ 389.373696][ T6726] [<807b8550>] (tomoyo_check_open_permission) from [<807bd154>] (tomoyo_file_open+0x34/0x38) [ 389.373771][ T6726] r9:00000000 r8:855c41a8 r7:00000000 r6:836cb180 r5:81ccd4d4 r4:855c4180 [ 389.373789][ T6726] [<807bd120>] (tomoyo_file_open) from [<8077a490>] (security_file_open+0x54/0x194) [ 389.373869][ T6726] r5:81ccd4d4 r4:855c4180 [ 389.373889][ T6726] [<8077a43c>] (security_file_open) from [<8054c4fc>] (do_dentry_open+0xe8/0x630) [ 389.373951][ T6726] r5:81ccd4d4 r4:855c4180 [ 389.373991][ T6726] [<8054c414>] (do_dentry_open) from [<8054e260>] (vfs_open+0x2c/0xe8) [ 389.374070][ T6726] r8:ee249e58 r7:00000000 r6:855c41a8 r5:829225e0 r4:855c4180 [ 389.374113][ T6726] [<8054e234>] (vfs_open) from [<80566f38>] (path_openat+0x7e0/0x11a0) [ 389.374200][ T6726] r6:ee249f20 r5:829225e0 r4:00000101 [ 389.374214][ T6726] [<80566758>] (path_openat) from [<805679a4>] (do_filp_open+0xac/0x148) [ 389.374300][ T6726] r10:00000142 r9:83249000 r8:00000001 r7:ee249e58 r6:ee249f20 r5:83b7d400 [ 389.374325][ T6726] r4:ffffff9c [ 389.374343][ T6726] [<805678f8>] (do_filp_open) from [<8054e764>] (do_sys_openat2+0x90/0xe0) [ 389.374415][ T6726] r9:83b7d400 r8:8020029c r7:ffffff9c r6:ee249f58 r5:83249000 r4:00000006 [ 389.374432][ T6726] [<8054e6d4>] (do_sys_openat2) from [<8054eb8c>] (sys_openat+0x98/0xd4) [ 389.374494][ T6726] r7:00000142 r6:0012fee0 r5:2000c380 r4:ffffff9c [ 389.374560][ T6726] [<8054eaf4>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 389.374628][ T6726] Exception stack(0xee249fa8 to 0xee249ff0) [ 389.374670][ T6726] 9fa0: 00000000 00000000 ffffff9c 2000c380 00080101 00000000 [ 389.374728][ T6726] 9fc0: 00000000 00000000 0012fee0 00000142 002d0000 00000000 00006364 76be80bc [ 389.374766][ T6726] 9fe0: 76be7ec0 76be7eb0 0001939c 00131f30 [ 389.374801][ T6726] r5:00000000 r4:00000000 [ 389.374847][ T6726] ERROR: Out of memory at tomoyo_realpath_from_path. [ 391.447441][ T6735] FAULT_INJECTION: forcing a failure. [ 391.447441][ T6735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.447877][ T6735] CPU: 1 UID: 0 PID: 6735 Comm: syz.0.715 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 391.447934][ T6735] Hardware name: ARM-Versatile Express [ 391.447966][ T6735] Call trace: [ 391.447998][ T6735] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 391.448070][ T6735] r7:20000240 r6:00000000 r5:60000013 r4:82257d0c [ 391.448080][ T6735] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 391.448108][ T6735] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 391.448137][ T6735] r5:83a96c00 r4:82951710 [ 391.448145][ T6735] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 391.448175][ T6735] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 391.448207][ T6735] r8:00000000 r7:20000240 r6:843c8000 r5:00000000 r4:ee495f20 [ 391.448215][ T6735] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 391.448240][ T6735] [<8095f694>] (should_fail_usercopy) from [<808aeb9c>] (_copy_from_iter+0x6c/0x7c8) [ 391.448268][ T6735] [<808aeb30>] (_copy_from_iter) from [<816453b8>] (netlink_sendmsg+0x18c/0x444) [ 391.448308][ T6735] r10:00000000 r9:00000000 r8:ee495f30 r7:8565bc00 r6:00000014 r5:830d9780 [ 391.448320][ T6735] r4:ee495f20 [ 391.448327][ T6735] [<8164522c>] (netlink_sendmsg) from [<81519cbc>] (__sock_sendmsg+0x44/0x78) [ 391.448364][ T6735] r10:00000000 r9:ee495dc4 r8:ee495dc4 r7:00000000 r6:83738000 r5:ee495f20 [ 391.448374][ T6735] r4:00000000 [ 391.448381][ T6735] [<81519c78>] (__sock_sendmsg) from [<8151a52c>] (____sys_sendmsg+0x298/0x2cc) [ 391.448410][ T6735] r7:00000000 r6:83738000 r5:00008000 r4:ee495f20 [ 391.448418][ T6735] [<8151a294>] (____sys_sendmsg) from [<8151c2cc>] (___sys_sendmsg+0x9c/0xd0) [ 391.448450][ T6735] r10:ee495e24 r9:200003c0 r8:00008000 r7:00000000 r6:83738000 r5:ee495f20 [ 391.448459][ T6735] r4:00000000 [ 391.448498][ T6735] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 391.448535][ T6735] r10:00000128 r9:83a96c00 r8:855900c0 r7:00008000 r6:200003c0 r5:855900c1 [ 391.448544][ T6735] r4:00000003 [ 391.448551][ T6735] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 391.448583][ T6735] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 391.448590][ T6735] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 391.448615][ T6735] Exception stack(0xee495fa8 to 0xee495ff0) [ 391.448638][ T6735] 5fa0: 00000000 00000000 00000003 200003c0 00008000 00000000 [ 391.448656][ T6735] 5fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76bca0bc [ 391.448670][ T6735] 5fe0: 76bc9ec0 76bc9eb0 0001939c 00131f30 [ 391.622806][ T6737] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 391.623159][ T6737] audit: out of memory in audit_log_start [ 393.049283][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 393.240181][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 393.240431][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 393.241810][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.250064][ T9] usb 2-1: config 0 descriptor?? [ 393.581878][ T9] usb 2-1: USB disconnect, device number 32 [ 396.829366][ T11] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 396.999086][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 397.013796][ T11] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 397.013991][ T11] usb 2-1: config 0 has no interface number 0 [ 397.014196][ T11] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 397.014297][ T11] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 397.014378][ T11] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 397.014460][ T11] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 397.014531][ T11] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.027589][ T11] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 397.027782][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.027953][ T11] usb 2-1: Product: syz [ 397.028054][ T11] usb 2-1: Manufacturer: syz [ 397.028128][ T11] usb 2-1: SerialNumber: syz [ 397.033924][ T11] usb 2-1: config 0 descriptor?? [ 397.323122][ T11] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 397.540174][ T121] usb 2-1: USB disconnect, device number 33 [ 399.325697][ T6810] FAULT_INJECTION: forcing a failure. [ 399.325697][ T6810] name failslab, interval 1, probability 0, space 0, times 0 [ 399.325977][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.0.731 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 399.326025][ T6810] Hardware name: ARM-Versatile Express [ 399.326053][ T6810] Call trace: [ 399.326074][ T6810] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 399.326132][ T6810] r7:00400cc0 r6:00000000 r5:60000013 r4:82257d0c [ 399.326141][ T6810] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 399.326223][ T6810] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 399.326257][ T6810] r5:83b85400 r4:8291bcc0 [ 399.326276][ T6810] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 399.326331][ T6810] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 399.326420][ T6810] r8:83b85400 r7:00400cc0 r6:eeb21e5c r5:00000019 r4:83002000 [ 399.326431][ T6810] [<80525620>] (should_failslab) from [<8050b134>] (__kmalloc_node_track_caller_noprof+0xa0/0x464) [ 399.326486][ T6810] [<8050b094>] (__kmalloc_node_track_caller_noprof) from [<804a4da8>] (kstrdup+0x38/0x64) [ 399.326571][ T6810] r10:00000001 r9:eeb21e5c r8:830cc5b0 r7:8058b4c4 r6:eeb21e5c r5:00000018 [ 399.326615][ T6810] r4:00400cc0 [ 399.326623][ T6810] [<804a4d70>] (kstrdup) from [<8058b4c4>] (simple_xattr_set+0x40/0x184) [ 399.326731][ T6810] r7:83d17438 r6:854d5980 r5:eeb21e5c r4:85733f80 [ 399.326794][ T6810] [<8058b484>] (simple_xattr_set) from [<8049c93c>] (shmem_xattr_handler_set+0x194/0x1a8) [ 399.326875][ T6810] r9:eeb21e5c r8:830cc5b0 r7:00000048 r6:830cc580 r5:83d17458 r4:85733f80 [ 399.326939][ T6810] [<8049c7a8>] (shmem_xattr_handler_set) from [<805896b0>] (__vfs_setxattr+0xb4/0xc8) [ 399.327066][ T6810] r9:8049c7a8 r8:00000008 r7:85733f80 r6:8342b770 r5:829225e0 r4:83d17458 [ 399.327118][ T6810] [<805895fc>] (__vfs_setxattr) from [<8058a0d8>] (__vfs_setxattr_noperm+0x7c/0x204) [ 399.327185][ T6810] r9:829225e0 r8:85733f80 r7:83d17458 r6:00000001 r5:eeb21e5c r4:8342b770 [ 399.327281][ T6810] [<8058a05c>] (__vfs_setxattr_noperm) from [<8058a348>] (__vfs_setxattr_locked+0xe8/0x118) [ 399.327336][ T6810] r10:eeb21dc0 r9:00000008 r8:83d17458 r7:85733f80 r6:eeb21e5c r5:829225e0 [ 399.327369][ T6810] r4:8342b770 [ 399.327407][ T6810] [<8058a260>] (__vfs_setxattr_locked) from [<8058a408>] (vfs_setxattr+0x90/0x180) [ 399.327440][ T6810] r8:829225e0 r7:eeb21e5c r6:8342b770 r5:83d174d8 r4:eeb21e48 [ 399.327520][ T6810] [<8058a378>] (vfs_setxattr) from [<8058a58c>] (do_setxattr+0x94/0x9c) [ 399.327586][ T6810] r10:000000e4 r9:8342b770 r8:829225e0 r7:85733f80 r6:00000008 r5:eeb21e5c [ 399.327663][ T6810] r4:eeb21e48 [ 399.327695][ T6810] [<8058a4f8>] (do_setxattr) from [<8058a7bc>] (file_setxattr+0x58/0x78) [ 399.327839][ T6810] r9:83b85400 r8:200001c0 r7:00000003 r6:eeb21e48 r5:855886c0 r4:00000000 [ 399.327872][ T6810] [<8058a764>] (file_setxattr) from [<8058a9c0>] (path_setxattrat+0x104/0x17c) [ 399.327987][ T6810] r7:00000003 r6:855886c0 r5:855886c1 r4:00000000 [ 399.328117][ T6810] [<8058a8bc>] (path_setxattrat) from [<8058ac38>] (sys_fsetxattr+0x30/0x38) [ 399.328202][ T6810] r8:8020029c r7:000000e4 r6:0012fee0 r5:00000000 r4:00000001 [ 399.328234][ T6810] [<8058ac08>] (sys_fsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 399.328284][ T6810] Exception stack(0xeeb21fa8 to 0xeeb21ff0) [ 399.328382][ T6810] 1fa0: 00000001 00000000 00000003 20000180 200001c0 00000008 [ 399.328457][ T6810] 1fc0: 00000001 00000000 0012fee0 000000e4 002d0000 00000000 00006364 76bca0bc [ 399.328472][ T6810] 1fe0: 76bc9ec0 76bc9eb0 0001939c 00131f30 [ 401.009614][ T31] audit: type=1400 audit(400.940:297): avc: denied { map } for pid=6818 comm="syz.0.733" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 401.009916][ T31] audit: type=1400 audit(400.940:298): avc: denied { read write } for pid=6818 comm="syz.0.733" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 404.882285][ T6846] input: syz1 as /devices/virtual/input/input11 [ 405.788281][ T6866] FAULT_INJECTION: forcing a failure. [ 405.788281][ T6866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.789978][ T6866] CPU: 1 UID: 0 PID: 6866 Comm: syz.1.745 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 405.790071][ T6866] Hardware name: ARM-Versatile Express [ 405.790089][ T6866] Call trace: [ 405.790119][ T6866] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 405.790204][ T6866] r7:200056c0 r6:00000000 r5:60000013 r4:82257d0c [ 405.790216][ T6866] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 405.790255][ T6866] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 405.790295][ T6866] r5:83b80c00 r4:82951710 [ 405.790306][ T6866] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 405.790347][ T6866] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 405.790394][ T6866] r8:b5403587 r7:200056c0 r6:dfb11e64 r5:0000000c r4:0000000c [ 405.790404][ T6866] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 405.790440][ T6866] [<8095f694>] (should_fail_usercopy) from [<8151a594>] (move_addr_to_kernel+0x34/0xf8) [ 405.790479][ T6866] [<8151a560>] (move_addr_to_kernel) from [<8151c0d4>] (__copy_msghdr+0xe4/0x110) [ 405.790526][ T6866] r7:dfb11e20 r6:20005800 r5:dfb11dd0 r4:dfb11f20 [ 405.790537][ T6866] [<8151bff0>] (__copy_msghdr) from [<8151c1ac>] (copy_msghdr_from_user+0xac/0x130) [ 405.790576][ T6866] r5:00000000 r4:dfb11f20 [ 405.790586][ T6866] [<8151c100>] (copy_msghdr_from_user) from [<8151c2a8>] (___sys_sendmsg+0x78/0xd0) [ 405.790631][ T6866] r8:20000004 r7:00000000 r6:83601400 r5:dfb11f20 r4:dfb11e64 [ 405.790642][ T6866] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 405.790689][ T6866] r10:00000128 r9:83b80c00 r8:85505cc0 r7:20000004 r6:20005800 r5:85505cc1 [ 405.790702][ T6866] r4:00000004 [ 405.790712][ T6866] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 405.790757][ T6866] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 405.790767][ T6866] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 405.790800][ T6866] Exception stack(0xdfb11fa8 to 0xdfb11ff0) [ 405.790827][ T6866] 1fa0: 00000000 00000000 00000004 20005800 20000004 00000000 [ 405.790852][ T6866] 1fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76be80bc [ 405.790871][ T6866] 1fe0: 76be7ec0 76be7eb0 0001939c 00131f30 [ 406.609120][ T31] audit: type=1400 audit(406.530:299): avc: denied { read } for pid=6873 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 406.694212][ T6877] FAULT_INJECTION: forcing a failure. [ 406.694212][ T6877] name failslab, interval 1, probability 0, space 0, times 0 [ 406.694508][ T6877] CPU: 0 UID: 0 PID: 6877 Comm: syz.0.749 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 406.694547][ T6877] Hardware name: ARM-Versatile Express [ 406.694561][ T6877] Call trace: [ 406.694582][ T6877] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 406.694682][ T6877] r7:00000d40 r6:00000000 r5:60000013 r4:82257d0c [ 406.694695][ T6877] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 406.694731][ T6877] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 406.694783][ T6877] r5:83b85400 r4:8291bcc0 [ 406.694792][ T6877] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 406.694823][ T6877] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 406.694860][ T6877] r8:83b85400 r7:00000d40 r6:85731e68 r5:00000021 r4:83001240 [ 406.694868][ T6877] [<80525620>] (should_failslab) from [<8050a480>] (__kmalloc_noprof+0x9c/0x458) [ 406.694895][ T6877] [<8050a3e4>] (__kmalloc_noprof) from [<807bc1b4>] (tomoyo_encode2+0x64/0xf0) [ 406.694943][ T6877] r10:00000fff r9:8309e800 r8:00000000 r7:83576bb0 r6:85731e68 r5:84d8fffc [ 406.694966][ T6877] r4:84d8ffe6 [ 406.694975][ T6877] [<807bc150>] (tomoyo_encode2) from [<807bc264>] (tomoyo_encode+0x24/0x30) [ 406.695010][ T6877] r9:8309e800 r8:00000000 r7:83576bb0 r6:85731e68 r5:00001000 r4:84d8ffe7 [ 406.695018][ T6877] [<807bc240>] (tomoyo_encode) from [<807bc2f0>] (tomoyo_realpath_from_path+0x80/0x17c) [ 406.695046][ T6877] r5:00001000 r4:84d8f000 [ 406.695074][ T6877] [<807bc270>] (tomoyo_realpath_from_path) from [<807b83f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 406.695135][ T6877] r10:83b85400 r9:00000000 r8:85731e40 r7:00005450 r6:00000004 r5:81cd56c4 [ 406.695172][ T6877] r4:85731e68 r3:826c0240 [ 406.695181][ T6877] [<807b8324>] (tomoyo_path_number_perm) from [<807bccd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 406.695243][ T6877] r9:00000003 r8:85731e40 r7:00000000 r6:00000000 r5:00005450 r4:85731e40 [ 406.695273][ T6877] [<807bccb4>] (tomoyo_file_ioctl) from [<8076a70c>] (security_file_ioctl+0x64/0x1e4) [ 406.695314][ T6877] [<8076a6a8>] (security_file_ioctl) from [<8056b32c>] (sys_ioctl+0x4c/0xd84) [ 406.695367][ T6877] r7:00000000 r6:85731e41 r5:00000000 r4:00005450 [ 406.695399][ T6877] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 406.695426][ T6877] Exception stack(0xdfb4dfa8 to 0xdfb4dff0) [ 406.695471][ T6877] dfa0: 00000000 00000000 00000003 00005450 00000000 00000000 [ 406.695513][ T6877] dfc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76bca0bc [ 406.695550][ T6877] dfe0: 76bc9ec0 76bc9eb0 0001939c 00131f30 [ 406.695594][ T6877] r10:00000036 r9:83b85400 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 406.695627][ T6877] r4:00000000 [ 406.695682][ T6877] ERROR: Out of memory at tomoyo_realpath_from_path. [ 406.879344][ T31] audit: type=1400 audit(406.810:300): avc: denied { map } for pid=6878 comm="syz.0.750" path="pipe:[10227]" dev="pipefs" ino=10227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 407.152229][ T31] audit: type=1400 audit(407.090:301): avc: denied { unmount } for pid=3097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 409.582190][ T6901] FAULT_INJECTION: forcing a failure. [ 409.582190][ T6901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.589365][ T6901] CPU: 1 UID: 0 PID: 6901 Comm: syz.1.756 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 409.589439][ T6901] Hardware name: ARM-Versatile Express [ 409.589453][ T6901] Call trace: [ 409.589514][ T6901] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 409.589577][ T6901] r7:00000000 r6:00000000 r5:60000013 r4:82257d0c [ 409.589586][ T6901] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 409.589632][ T6901] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 409.589664][ T6901] r5:83b85400 r4:82951710 [ 409.589672][ T6901] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 409.589703][ T6901] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 409.589736][ T6901] r8:76be7f30 r7:00000000 r6:00000000 r5:dfbc5f68 r4:00000002 [ 409.589744][ T6901] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 409.589770][ T6901] [<8095f694>] (should_fail_usercopy) from [<8058cc58>] (simple_read_from_buffer+0x80/0x13c) [ 409.589800][ T6901] [<8058cbd8>] (simple_read_from_buffer) from [<806041f0>] (proc_fail_nth_read+0xb8/0x100) [ 409.589838][ T6901] r10:00000001 r9:80604138 r8:00000002 r7:dfbc5f68 r6:0000000f r5:76be7f30 [ 409.589850][ T6901] r4:83b85400 r3:dfbc5e9f [ 409.589858][ T6901] [<80604138>] (proc_fail_nth_read) from [<805517a0>] (vfs_read+0x98/0x320) [ 409.589893][ T6901] r8:76be7f30 r7:dfbc5f68 r6:83b85400 r5:0000000f r4:855056c0 [ 409.589902][ T6901] [<80551708>] (vfs_read) from [<80552440>] (ksys_read+0x74/0xe4) [ 409.589951][ T6901] r10:00000003 r9:83b85400 r8:8020029c r7:00000000 r6:00000000 r5:855056c0 [ 409.589961][ T6901] r4:855056c3 [ 409.589969][ T6901] [<805523cc>] (ksys_read) from [<805524c0>] (sys_read+0x10/0x14) [ 409.590000][ T6901] r7:00000003 r6:00000004 r5:76be7f30 r4:0000000f [ 409.590009][ T6901] [<805524b0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 409.590034][ T6901] Exception stack(0xdfbc5fa8 to 0xdfbc5ff0) [ 409.590059][ T6901] 5fa0: 0000000f 76be7f30 00000004 76be7f30 0000000f 00000000 [ 409.590077][ T6901] 5fc0: 0000000f 76be7f30 00000004 00000003 002d0000 00000000 00006364 76be80bc [ 409.590091][ T6901] 5fe0: 00000158 76be7ed0 000d7d68 0012fe04 [ 409.813490][ T6903] fuse: Bad value for 'fd' [ 410.459685][ T31] audit: type=1400 audit(410.400:302): avc: denied { setattr } for pid=6896 comm="syz.0.755" name="[io_uring]" dev="anon_inodefs" ino=11295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 412.149570][ T31] audit: type=1400 audit(412.070:303): avc: denied { ioctl } for pid=6912 comm="syz.1.760" path="socket:[11309]" dev="sockfs" ino=11309 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 412.550159][ T6917] fuse: Bad value for 'fd' [ 412.795631][ T6919] fuse: Unknown parameter 'fd01777777777777777777777' [ 413.059368][ T6921] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6921 comm=syz.1.764 [ 417.253736][ T6932] fuse: Bad value for 'fd' [ 420.490740][ T31] audit: type=1400 audit(420.430:304): avc: denied { map } for pid=6955 comm="syz.0.776" path="socket:[10571]" dev="sockfs" ino=10571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 420.602139][ T6958] FAULT_INJECTION: forcing a failure. [ 420.602139][ T6958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.610206][ T6958] CPU: 1 UID: 0 PID: 6958 Comm: syz.0.777 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 420.610318][ T6958] Hardware name: ARM-Versatile Express [ 420.610344][ T6958] Call trace: [ 420.610381][ T6958] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 420.610488][ T6958] r7:85308d80 r6:00000000 r5:60000113 r4:82257d0c [ 420.610507][ T6958] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 420.610561][ T6958] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 420.610618][ T6958] r5:83b98000 r4:82951710 [ 420.610634][ T6958] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 420.610694][ T6958] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 420.610760][ T6958] r8:85505540 r7:85308d80 r6:20000740 r5:20000740 r4:82c1f8e4 [ 420.610776][ T6958] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 420.610827][ T6958] [<8095f694>] (should_fail_usercopy) from [<818eb7e4>] (vlan_ioctl_handler+0x3c/0x4a0) [ 420.610887][ T6958] [<818eb7a8>] (vlan_ioctl_handler) from [<8151a8d8>] (sock_ioctl+0x1f8/0x600) [ 420.610961][ T6958] r9:00000003 r8:85505540 r7:83639400 r6:85308d80 r5:20000740 r4:82c1f8e4 [ 420.610979][ T6958] [<8151a6e0>] (sock_ioctl) from [<8056b418>] (sys_ioctl+0x138/0xd84) [ 420.611052][ T6958] r9:00000003 r8:85505540 r7:20000740 r6:85505541 r5:00000000 r4:00008983 [ 420.611069][ T6958] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 420.611119][ T6958] Exception stack(0xdfdc5fa8 to 0xdfdc5ff0) [ 420.611159][ T6958] 5fa0: 00000000 00000000 00000003 00008983 20000740 00000000 [ 420.611196][ T6958] 5fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76bca0bc [ 420.611224][ T6958] 5fe0: 76bc9ec0 76bc9eb0 0001939c 00131f30 [ 420.611263][ T6958] r10:00000036 r9:83b98000 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 420.611282][ T6958] r4:00000000 [ 426.189427][ T23] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 426.339488][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 426.345873][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 426.360275][ T23] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 426.361020][ T23] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 426.361759][ T23] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 426.362463][ T23] usb 2-1: config 1 interface 0 has no altsetting 0 [ 426.407826][ T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 426.408492][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.409393][ T23] usb 2-1: Product: syz [ 426.409784][ T23] usb 2-1: Manufacturer: syz [ 426.410168][ T23] usb 2-1: SerialNumber: syz [ 426.431276][ T7006] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 426.673746][ T23] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input12 [ 426.880421][ T23] bcm5974 2-1:1.0: could not read from device [ 426.889806][ T23] input: failed to attach handler mousedev to device input12, error: -5 [ 427.091522][ T11] usb 2-1: USB disconnect, device number 34 [ 427.872017][ T7046] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7046 comm=syz.1.800 [ 429.960211][ T7051] FAULT_INJECTION: forcing a failure. [ 429.960211][ T7051] name failslab, interval 1, probability 0, space 0, times 0 [ 429.960497][ T7051] CPU: 0 UID: 0 PID: 7051 Comm: syz.1.803 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 429.960530][ T7051] Hardware name: ARM-Versatile Express [ 429.960542][ T7051] Call trace: [ 429.960561][ T7051] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 429.960637][ T7051] r7:00000c40 r6:00000000 r5:60000013 r4:82257d0c [ 429.960659][ T7051] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 429.960693][ T7051] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 429.960723][ T7051] r5:84346000 r4:8291bcc0 [ 429.960731][ T7051] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 429.960761][ T7051] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 429.960807][ T7051] r8:84346000 r7:00000c40 r6:843621a8 r5:00001000 r4:830016c0 [ 429.960817][ T7051] [<80525620>] (should_failslab) from [<8050a480>] (__kmalloc_noprof+0x9c/0x458) [ 429.960846][ T7051] [<8050a3e4>] (__kmalloc_noprof) from [<807bc2ac>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 429.960885][ T7051] r10:84346000 r9:8309e800 r8:00000000 r7:834c83b8 r6:843621a8 r5:00001000 [ 429.960894][ T7051] r4:00000000 [ 429.960901][ T7051] [<807bc270>] (tomoyo_realpath_from_path) from [<807b83f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 429.960938][ T7051] r10:84346000 r9:00000000 r8:84362180 r7:800454df r6:00000004 r5:81cd56c4 [ 429.960988][ T7051] r4:843621a8 r3:826c0240 [ 429.960998][ T7051] [<807b8324>] (tomoyo_path_number_perm) from [<807bccd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 429.961049][ T7051] r9:00000003 r8:84362180 r7:00000000 r6:00000000 r5:800454df r4:84362180 [ 429.961059][ T7051] [<807bccb4>] (tomoyo_file_ioctl) from [<8076a70c>] (security_file_ioctl+0x64/0x1e4) [ 429.961090][ T7051] [<8076a6a8>] (security_file_ioctl) from [<8056b32c>] (sys_ioctl+0x4c/0xd84) [ 429.961134][ T7051] r7:00000000 r6:84362181 r5:00000000 r4:800454df [ 429.961144][ T7051] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 429.961216][ T7051] Exception stack(0xe08ddfa8 to 0xe08ddff0) [ 429.961243][ T7051] dfa0: 00000000 00000000 00000003 800454df 00000000 00000000 [ 429.961261][ T7051] dfc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76be80bc [ 429.961274][ T7051] dfe0: 76be7ec0 76be7eb0 0001939c 00131f30 [ 429.961292][ T7051] r10:00000036 r9:84346000 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 429.961323][ T7051] r4:00000000 [ 429.961339][ T7051] ERROR: Out of memory at tomoyo_realpath_from_path. [ 433.187157][ T7070] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7070 comm=syz.1.810 [ 436.558650][ T7084] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7084 comm=syz.1.815 [ 442.369341][ T31] audit: type=1400 audit(442.280:305): avc: denied { connect } for pid=7105 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 445.779184][ T31] audit: type=1400 audit(445.710:306): avc: denied { getopt } for pid=7111 comm="syz.1.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 447.139363][ T23] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 447.300350][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.359879][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 447.360136][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.360292][ T23] usb 2-1: Product: syz [ 447.360402][ T23] usb 2-1: Manufacturer: syz [ 447.360513][ T23] usb 2-1: SerialNumber: syz [ 447.370539][ T23] usb 2-1: selecting invalid altsetting 1 [ 447.812978][ T23] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 447.814166][ T23] cdc_ncm 2-1:1.0: bind() failure [ 447.830613][ T23] usb 2-1: USB disconnect, device number 35 [ 448.181297][ T31] audit: type=1400 audit(448.120:307): avc: denied { lock } for pid=7138 comm="syz.1.829" path="socket:[10844]" dev="sockfs" ino=10844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 450.775779][ T7148] fuse: Bad value for 'group_id' [ 450.776055][ T7148] fuse: Bad value for 'group_id' [ 451.403972][ T7166] fuse: Bad value for 'group_id' [ 451.404321][ T7166] fuse: Bad value for 'group_id' [ 452.589836][ T7180] fuse: Bad value for 'group_id' [ 452.590080][ T7180] fuse: Bad value for 'group_id' [ 454.499301][ T31] audit: type=1400 audit(454.430:308): avc: denied { listen } for pid=7192 comm="syz.0.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 465.451752][ T7251] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7251 comm=syz.1.864 [ 469.010600][ T7313] fuse: Unknown parameter 'F(L$'' [ 469.017081][ T31] audit: type=1400 audit(468.910:309): avc: denied { read } for pid=7311 comm="syz.1.876" dev="sockfs" ino=11131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 469.673664][ T7318] fuse: Unknown parameter 'grou00000000000000000000' [ 472.803325][ T7333] fuse: Unknown parameter 'grou00000000000000000000' [ 474.133671][ T31] audit: type=1400 audit(474.070:310): avc: denied { listen } for pid=7340 comm="syz.0.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 474.179143][ T31] audit: type=1400 audit(474.090:311): avc: denied { setattr } for pid=7340 comm="syz.0.886" path="socket:[11192]" dev="sockfs" ino=11192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 474.179443][ T31] audit: type=1400 audit(474.090:312): avc: denied { accept } for pid=7340 comm="syz.0.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 474.463748][ T7346] fuse: Unknown parameter 'grou00000000000000000000' [ 475.369552][ T23] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 475.563119][ T23] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 475.563439][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.563619][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.563752][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 475.629936][ T23] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 475.630533][ T23] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 475.631031][ T23] usb 1-1: Manufacturer: syz [ 475.633435][ T23] usb 1-1: config 0 descriptor?? [ 476.053670][ T23] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 476.055014][ T23] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 476.057913][ T23] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 476.070909][ T7362] fuse: Unknown parameter 'group_i00000000000000000000' [ 477.264143][ T7355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.265477][ T7355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.272115][ T7355] raw-gadget.0 gadget.0: fail, usb_ep_queue returned -108 [ 477.910304][ T7373] FAULT_INJECTION: forcing a failure. [ 477.910304][ T7373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.910581][ T7373] CPU: 0 UID: 0 PID: 7373 Comm: syz.1.895 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 477.910623][ T7373] Hardware name: ARM-Versatile Express [ 477.910637][ T7373] Call trace: [ 477.910668][ T7373] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 477.910740][ T7373] r7:20000040 r6:00000000 r5:60000113 r4:82257d0c [ 477.910750][ T7373] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 477.910779][ T7373] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 477.910934][ T7373] r5:8398c800 r4:82951710 [ 477.911040][ T7373] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 477.911125][ T7373] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 477.911217][ T7373] r8:00000000 r7:20000040 r6:8532a3a3 r5:00000000 r4:00000000 [ 477.911249][ T7373] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 477.911298][ T7373] [<8095f694>] (should_fail_usercopy) from [<808aeb9c>] (_copy_from_iter+0x6c/0x7c8) [ 477.911580][ T7373] [<808aeb30>] (_copy_from_iter) from [<818d9688>] (isotp_sendmsg+0x254/0x820) [ 477.911692][ T7373] r10:eb81de98 r9:8532a3a3 r8:eb81dea8 r7:00000001 r6:85328000 r5:8532a000 [ 477.911705][ T7373] r4:00000000 [ 477.911713][ T7373] [<818d9434>] (isotp_sendmsg) from [<81519cbc>] (__sock_sendmsg+0x44/0x78) [ 477.911823][ T7373] r10:00000122 r9:855c43c0 r8:855c43c1 r7:00000000 r6:837c0000 r5:eb81de98 [ 477.911941][ T7373] r4:00000000 [ 477.912015][ T7373] [<81519c78>] (__sock_sendmsg) from [<8151bafc>] (__sys_sendto+0x110/0x15c) [ 477.912127][ T7373] r7:00000000 r6:837c0000 r5:20000800 r4:00000000 [ 477.912216][ T7373] [<8151b9ec>] (__sys_sendto) from [<8151bb64>] (sys_sendto+0x1c/0x24) [ 477.912320][ T7373] r9:8398c800 r8:8020029c r7:00000122 r6:0012fee0 r5:00000000 r4:00000000 [ 477.912346][ T7373] [<8151bb48>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 477.912466][ T7373] Exception stack(0xeb81dfa8 to 0xeb81dff0) [ 477.912597][ T7373] dfa0: 00000000 00000000 00000003 20000040 00000001 20000800 [ 477.912634][ T7373] dfc0: 00000000 00000000 0012fee0 00000122 002d0000 00000000 00006364 76be80bc [ 477.912735][ T7373] dfe0: 76be7ec0 76be7eb0 0001939c 00131f30 [ 478.031588][ T23] usb 1-1: USB disconnect, device number 22 [ 479.409103][ T121] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 479.512569][ T7403] fuse: Unknown parameter 'group_i00000000000000000000' [ 479.599159][ T121] usb 2-1: Using ep0 maxpacket: 16 [ 479.601137][ T7405] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 479.621879][ T121] usb 2-1: unable to get BOS descriptor or descriptor too short [ 479.623563][ T7405] audit: out of memory in audit_log_start [ 479.629847][ T121] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 479.630017][ T121] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 479.630177][ T121] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.630229][ T121] usb 2-1: config 1 interface 0 has no altsetting 0 [ 479.646230][ T121] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 479.646418][ T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.646581][ T121] usb 2-1: Product: syz [ 479.646620][ T121] usb 2-1: Manufacturer: syz [ 479.646651][ T121] usb 2-1: SerialNumber: syz [ 479.667661][ T7398] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 480.233939][ T121] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input13 [ 480.240689][ T121] usb 2-1: USB disconnect, device number 36 [ 480.320599][ T7429] FAULT_INJECTION: forcing a failure. [ 480.320599][ T7429] name failslab, interval 1, probability 0, space 0, times 0 [ 480.330739][ T7429] CPU: 1 UID: 0 PID: 7429 Comm: syz.0.903 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 480.330805][ T7429] Hardware name: ARM-Versatile Express [ 480.330819][ T7429] Call trace: [ 480.330842][ T7429] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 480.330920][ T7429] r7:83989800 r6:00000000 r5:60000113 r4:82257d0c [ 480.330930][ T7429] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 480.330959][ T7429] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 480.330990][ T7429] r5:83989800 r4:8291bcc0 [ 480.330998][ T7429] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 480.331030][ T7429] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 480.331072][ T7429] r8:00000000 r7:83989800 r6:00000cc0 r5:0018562c r4:830a8a80 [ 480.331081][ T7429] [<80525620>] (should_failslab) from [<8050a0fc>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 480.331110][ T7429] [<8050a0b0>] (kmem_cache_alloc_noprof) from [<80560b4c>] (getname_flags.part.0+0x28/0x18c) [ 480.331149][ T7429] r10:00000142 r9:83989800 r8:8020029c r7:00000000 r6:8245d848 r5:0018562c [ 480.331160][ T7429] r4:0018562c [ 480.331167][ T7429] [<80560b24>] (getname_flags.part.0) from [<80565c34>] (getname_flags+0x3c/0x50) [ 480.331211][ T7429] r9:83989800 r8:8020029c r7:ffffff9c r6:eba19f58 r5:00000000 r4:0018562c [ 480.331219][ T7429] [<80565bf8>] (getname_flags) from [<8054e734>] (do_sys_openat2+0x60/0xe0) [ 480.331254][ T7429] r5:0018562c r4:00000000 [ 480.331262][ T7429] [<8054e6d4>] (do_sys_openat2) from [<8054eb8c>] (sys_openat+0x98/0xd4) [ 480.331292][ T7429] r7:00000142 r6:00000000 r5:0018562c r4:ffffff9c [ 480.331301][ T7429] [<8054eaf4>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 480.331334][ T7429] Exception stack(0xeba19fa8 to 0xeba19ff0) [ 480.331355][ T7429] 9fa0: 00000002 0018562c ffffff9c 0018562c 00000002 00000000 [ 480.331373][ T7429] 9fc0: 00000002 0018562c 00000000 00000142 00000000 00000000 00006364 76bca0bc [ 480.331387][ T7429] 9fe0: 20000ac0 76bc7dd8 000d7d68 0012fd28 [ 480.331400][ T7429] r5:0018562c r4:00000002 [ 480.463593][ T7432] fuse: Unknown parameter 'group_id00000000000000000000' [ 480.583684][ T7435] FAULT_INJECTION: forcing a failure. [ 480.583684][ T7435] name failslab, interval 1, probability 0, space 0, times 0 [ 480.583955][ T7435] CPU: 0 UID: 0 PID: 7435 Comm: syz.0.906 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 480.583999][ T7435] Hardware name: ARM-Versatile Express [ 480.584012][ T7435] Call trace: [ 480.584046][ T7435] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 480.584111][ T7435] r7:00000cc0 r6:00000000 r5:60000013 r4:82257d0c [ 480.584120][ T7435] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 480.584149][ T7435] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 480.584254][ T7435] r5:83b9d400 r4:8291bcc0 [ 480.584281][ T7435] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 480.584439][ T7435] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 480.584519][ T7435] r8:83b9d400 r7:00000cc0 r6:00000008 r5:00000008 r4:83001240 [ 480.584598][ T7435] [<80525620>] (should_failslab) from [<8050a480>] (__kmalloc_noprof+0x9c/0x458) [ 480.584692][ T7435] [<8050a3e4>] (__kmalloc_noprof) from [<8151f680>] (sock_kmalloc+0x58/0x80) [ 480.584735][ T7435] r10:00000000 r9:0000003c r8:00000000 r7:00000000 r6:00000008 r5:00000008 [ 480.584793][ T7435] r4:85397510 [ 480.584872][ T7435] [<8151f628>] (sock_kmalloc) from [<8080ffec>] (hash_alloc_result+0x3c/0x64) [ 480.584977][ T7435] r5:00000000 r4:85395000 [ 480.585084][ T7435] [<8080ffb0>] (hash_alloc_result) from [<808107f4>] (hash_sendmsg+0x1d4/0x3e4) [ 480.585286][ T7435] r7:00000000 r6:eb949f20 r5:85395000 r4:0000003c [ 480.585300][ T7435] [<80810620>] (hash_sendmsg) from [<81519cbc>] (__sock_sendmsg+0x44/0x78) [ 480.585484][ T7435] r10:00000000 r9:eb949dc4 r8:eb949dc4 r7:00000000 r6:837c1400 r5:eb949f20 [ 480.585555][ T7435] r4:00000000 [ 480.585697][ T7435] [<81519c78>] (__sock_sendmsg) from [<8151a52c>] (____sys_sendmsg+0x298/0x2cc) [ 480.585801][ T7435] r7:00000000 r6:837c1400 r5:000400c0 r4:eb949f20 [ 480.585853][ T7435] [<8151a294>] (____sys_sendmsg) from [<8151c2cc>] (___sys_sendmsg+0x9c/0xd0) [ 480.585942][ T7435] r10:eb949e24 r9:20000140 r8:00040080 r7:00000000 r6:837c1400 r5:eb949f20 [ 480.586025][ T7435] r4:00000000 [ 480.586134][ T7435] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 480.586240][ T7435] r10:00000128 r9:83b9d400 r8:855c4b40 r7:00040080 r6:20000140 r5:855c4b41 [ 480.586318][ T7435] r4:00000004 [ 480.586326][ T7435] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 480.586360][ T7435] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 480.586415][ T7435] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 480.586624][ T7435] Exception stack(0xeb949fa8 to 0xeb949ff0) [ 480.586782][ T7435] 9fa0: 00000000 00000000 00000004 20000140 00040080 00000000 [ 480.586852][ T7435] 9fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76bca0bc [ 480.586941][ T7435] 9fe0: 76bc9ec0 76bc9eb0 0001939c 00131f30 [ 481.294965][ T7451] FAULT_INJECTION: forcing a failure. [ 481.294965][ T7451] name failslab, interval 1, probability 0, space 0, times 0 [ 481.295264][ T7451] CPU: 0 UID: 0 PID: 7451 Comm: syz.0.914 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 481.295309][ T7451] Hardware name: ARM-Versatile Express [ 481.295322][ T7451] Call trace: [ 481.295344][ T7451] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 481.295403][ T7451] r7:8398ec00 r6:00000000 r5:60000013 r4:82257d0c [ 481.295413][ T7451] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 481.295443][ T7451] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 481.295474][ T7451] r5:8398ec00 r4:8291bcc0 [ 481.295481][ T7451] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 481.295513][ T7451] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 481.295555][ T7451] r8:00000000 r7:8398ec00 r6:00000cc0 r5:ffffffff r4:832ca240 [ 481.295665][ T7451] [<80525620>] (should_failslab) from [<80509a90>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 481.295808][ T7451] [<80509a40>] (kmem_cache_alloc_node_noprof) from [<81526ff8>] (__alloc_skb+0x138/0x160) [ 481.295915][ T7451] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:832ca240 r5:ffffffff [ 481.295969][ T7451] r4:82806040 [ 481.295993][ T7451] [<81526ec0>] (__alloc_skb) from [<81644d3c>] (netlink_alloc_large_skb+0x88/0xa0) [ 481.296081][ T7451] r8:00000000 r7:85396000 r6:00000014 r5:837c0500 r4:00000140 [ 481.296106][ T7451] [<81644cb4>] (netlink_alloc_large_skb) from [<81645360>] (netlink_sendmsg+0x134/0x444) [ 481.296256][ T7451] r5:837c0500 r4:ebae9f20 [ 481.296313][ T7451] [<8164522c>] (netlink_sendmsg) from [<81519cbc>] (__sock_sendmsg+0x44/0x78) [ 481.296395][ T7451] r10:00000000 r9:ebae9dc4 r8:ebae9dc4 r7:00000000 r6:837c0500 r5:ebae9f20 [ 481.296422][ T7451] r4:00000000 [ 481.296436][ T7451] [<81519c78>] (__sock_sendmsg) from [<8151a52c>] (____sys_sendmsg+0x298/0x2cc) [ 481.296467][ T7451] r7:00000000 r6:837c0500 r5:00000040 r4:ebae9f20 [ 481.296475][ T7451] [<8151a294>] (____sys_sendmsg) from [<8151c2cc>] (___sys_sendmsg+0x9c/0xd0) [ 481.296547][ T7451] r10:ebae9e24 r9:200001c0 r8:00000040 r7:00000000 r6:837c0500 r5:ebae9f20 [ 481.296604][ T7451] r4:00000000 [ 481.296630][ T7451] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 481.296683][ T7451] r10:00000128 r9:8398ec00 r8:855c4540 r7:00000040 r6:200001c0 r5:855c4541 [ 481.296712][ T7451] r4:00000003 [ 481.296828][ T7451] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 481.296894][ T7451] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 481.297035][ T7451] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 481.297214][ T7451] Exception stack(0xebae9fa8 to 0xebae9ff0) [ 481.297327][ T7451] 9fa0: 00000000 00000000 00000003 200001c0 00000040 00000000 [ 481.297347][ T7451] 9fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76bca0bc [ 481.297384][ T7451] 9fe0: 76bc9ec0 76bc9eb0 0001939c 00131f30 [ 482.259449][ T23] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 482.412766][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.413474][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.414157][ T23] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 482.414875][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.417928][ T23] usb 1-1: config 0 descriptor?? [ 482.863478][ T23] hid-steam 0003:28DE:1142.0004: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 482.919474][ T23] hid-steam 0003:28DE:1142.0004: Steam wireless receiver connected [ 482.933267][ T23] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 483.990288][ T7486] FAULT_INJECTION: forcing a failure. [ 483.990288][ T7486] name failslab, interval 1, probability 0, space 0, times 0 [ 483.991713][ T7486] CPU: 1 UID: 0 PID: 7486 Comm: syz.1.924 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 483.991789][ T7486] Hardware name: ARM-Versatile Express [ 483.991802][ T7486] Call trace: [ 483.991826][ T7486] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 483.991898][ T7486] r7:83b9d400 r6:00000000 r5:60000013 r4:82257d0c [ 483.991908][ T7486] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 483.991937][ T7486] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 483.991967][ T7486] r5:83b9d400 r4:8291bcc0 [ 483.991975][ T7486] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 483.992014][ T7486] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 483.992053][ T7486] r8:00000000 r7:83b9d400 r6:00000cc0 r5:ffffffff r4:832ca240 [ 483.992062][ T7486] [<80525620>] (should_failslab) from [<80509a90>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 483.992092][ T7486] [<80509a40>] (kmem_cache_alloc_node_noprof) from [<81526ff8>] (__alloc_skb+0x138/0x160) [ 483.992130][ T7486] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:832ca240 r5:ffffffff [ 483.992141][ T7486] r4:82806040 [ 483.992148][ T7486] [<81526ec0>] (__alloc_skb) from [<81644d3c>] (netlink_alloc_large_skb+0x88/0xa0) [ 483.992185][ T7486] r8:00000000 r7:85531400 r6:00000014 r5:84965180 r4:00000140 [ 483.992194][ T7486] [<81644cb4>] (netlink_alloc_large_skb) from [<81645360>] (netlink_sendmsg+0x134/0x444) [ 483.992224][ T7486] r5:84965180 r4:ebce9f20 [ 483.992232][ T7486] [<8164522c>] (netlink_sendmsg) from [<81519cbc>] (__sock_sendmsg+0x44/0x78) [ 483.992268][ T7486] r10:00000000 r9:ebce9dc4 r8:ebce9dc4 r7:00000000 r6:84965180 r5:ebce9f20 [ 483.992278][ T7486] r4:00000000 [ 483.992286][ T7486] [<81519c78>] (__sock_sendmsg) from [<8151a52c>] (____sys_sendmsg+0x298/0x2cc) [ 483.992316][ T7486] r7:00000000 r6:84965180 r5:00000090 r4:ebce9f20 [ 483.992324][ T7486] [<8151a294>] (____sys_sendmsg) from [<8151c2cc>] (___sys_sendmsg+0x9c/0xd0) [ 483.992357][ T7486] r10:ebce9e24 r9:20000180 r8:00000090 r7:00000000 r6:84965180 r5:ebce9f20 [ 483.992367][ T7486] r4:00000000 [ 483.992375][ T7486] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 483.992410][ T7486] r10:00000128 r9:83b9d400 r8:85766a80 r7:00000090 r6:20000180 r5:85766a81 [ 483.992419][ T7486] r4:00000004 [ 483.992427][ T7486] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 483.992459][ T7486] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 483.992468][ T7486] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 483.992494][ T7486] Exception stack(0xebce9fa8 to 0xebce9ff0) [ 483.992513][ T7486] 9fa0: 00000000 00000000 00000004 20000180 00000090 00000000 [ 483.992532][ T7486] 9fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76be80bc [ 483.992545][ T7486] 9fe0: 76be7ec0 76be7eb0 0001939c 00131f30 [ 484.432292][ T31] audit: type=1400 audit(484.370:313): avc: denied { shutdown } for pid=7496 comm="syz.1.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 484.741399][ T11] usb 1-1: USB disconnect, device number 23 [ 484.745275][ T11] hid-steam 0003:28DE:1142.0004: Steam wireless receiver disconnected [ 484.851882][ T31] audit: type=1400 audit(484.790:314): avc: denied { create } for pid=7496 comm="syz.1.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 485.080599][ T7513] FAULT_INJECTION: forcing a failure. [ 485.080599][ T7513] name failslab, interval 1, probability 0, space 0, times 0 [ 485.081513][ T7513] CPU: 1 UID: 0 PID: 7513 Comm: syz.1.929 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 485.081576][ T7513] Hardware name: ARM-Versatile Express [ 485.081590][ T7513] Call trace: [ 485.081610][ T7513] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 485.081670][ T7513] r7:83b98000 r6:00000000 r5:60000013 r4:82257d0c [ 485.081679][ T7513] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 485.081708][ T7513] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 485.081738][ T7513] r5:83b98000 r4:8291bcc0 [ 485.081746][ T7513] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 485.081777][ T7513] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 485.081814][ T7513] r8:00000000 r7:83b98000 r6:00000dc0 r5:85766000 r4:830a8540 [ 485.081823][ T7513] [<80525620>] (should_failslab) from [<8050a0fc>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 485.081852][ T7513] [<8050a0b0>] (kmem_cache_alloc_noprof) from [<80779288>] (security_file_alloc+0x30/0x1dc) [ 485.081890][ T7513] r10:00000142 r9:838a0000 r8:82805c40 r7:84d1a880 r6:00000002 r5:85766000 [ 485.081901][ T7513] r4:85766000 [ 485.081908][ T7513] [<80779258>] (security_file_alloc) from [<805537f0>] (init_file+0x48/0x110) [ 485.081939][ T7513] r5:85766000 r4:85766000 [ 485.081947][ T7513] [<805537a8>] (init_file) from [<80553f38>] (alloc_empty_file+0x68/0x13c) [ 485.081979][ T7513] r7:84d1a880 r6:00000002 r5:85766000 r4:8245d828 [ 485.081987][ T7513] [<80553ed0>] (alloc_empty_file) from [<80566798>] (path_openat+0x40/0x11a0) [ 485.082031][ T7513] r8:ebd99e58 r7:ebd99e58 r6:ebd99f20 r5:83b98000 r4:ffffff9c [ 485.082039][ T7513] [<80566758>] (path_openat) from [<805679a4>] (do_filp_open+0xac/0x148) [ 485.082076][ T7513] r10:00000142 r9:838a0000 r8:00000001 r7:ebd99e58 r6:ebd99f20 r5:83b98000 [ 485.082086][ T7513] r4:ffffff9c [ 485.082093][ T7513] [<805678f8>] (do_filp_open) from [<8054e764>] (do_sys_openat2+0x90/0xe0) [ 485.082128][ T7513] r9:83b98000 r8:8020029c r7:ffffff9c r6:ebd99f58 r5:838a0000 r4:00000004 [ 485.082137][ T7513] [<8054e6d4>] (do_sys_openat2) from [<8054eb8c>] (sys_openat+0x98/0xd4) [ 485.082167][ T7513] r7:00000142 r6:00000000 r5:0018562c r4:ffffff9c [ 485.082176][ T7513] [<8054eaf4>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 485.082201][ T7513] Exception stack(0xebd99fa8 to 0xebd99ff0) [ 485.082221][ T7513] 9fa0: 00000002 0018562c ffffff9c 0018562c 00000002 00000000 [ 485.082239][ T7513] 9fc0: 00000002 0018562c 00000000 00000142 00000000 00000000 00006364 76be80bc [ 485.082253][ T7513] 9fe0: 00000000 76be5dd8 000d7d68 0012fd28 [ 485.082266][ T7513] r5:0018562c r4:00000002 [ 486.506520][ T7522] fuse: Bad value for 'fd' [ 486.901626][ T31] audit: type=1326 audit(486.830:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.1.930" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 486.946338][ T7534] fuse: Bad value for 'fd' [ 488.435949][ T7541] FAULT_INJECTION: forcing a failure. [ 488.435949][ T7541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.436356][ T7541] CPU: 0 UID: 0 PID: 7541 Comm: syz.0.939 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 488.436457][ T7541] Hardware name: ARM-Versatile Express [ 488.436483][ T7541] Call trace: [ 488.436535][ T7541] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 488.436632][ T7541] r7:00000000 r6:00000000 r5:60000013 r4:82257d0c [ 488.436651][ T7541] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 488.436701][ T7541] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 488.436753][ T7541] r5:83b9d400 r4:82951710 [ 488.436769][ T7541] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 488.436819][ T7541] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 488.436874][ T7541] r8:76ba8f30 r7:00000000 r6:00000000 r5:ebd81f68 r4:00000002 [ 488.436890][ T7541] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 488.436934][ T7541] [<8095f694>] (should_fail_usercopy) from [<8058cc58>] (simple_read_from_buffer+0x80/0x13c) [ 488.436989][ T7541] [<8058cbd8>] (simple_read_from_buffer) from [<806041f0>] (proc_fail_nth_read+0xb8/0x100) [ 488.437091][ T7541] r10:00000001 r9:80604138 r8:00000002 r7:ebd81f68 r6:0000000f r5:76ba8f30 [ 488.437119][ T7541] r4:83b9d400 r3:ebd81e9f [ 488.437137][ T7541] [<80604138>] (proc_fail_nth_read) from [<805517a0>] (vfs_read+0x98/0x320) [ 488.437236][ T7541] r8:76ba8f30 r7:ebd81f68 r6:83b9d400 r5:0000000f r4:855c4780 [ 488.437256][ T7541] [<80551708>] (vfs_read) from [<80552440>] (ksys_read+0x74/0xe4) [ 488.437348][ T7541] r10:00000003 r9:83b9d400 r8:8020029c r7:00000000 r6:00000000 r5:855c4780 [ 488.437373][ T7541] r4:855c4783 [ 488.437404][ T7541] [<805523cc>] (ksys_read) from [<805524c0>] (sys_read+0x10/0x14) [ 488.437485][ T7541] r7:00000003 r6:00000004 r5:76ba8f30 r4:0000000f [ 488.437506][ T7541] [<805524b0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 488.437558][ T7541] Exception stack(0xebd81fa8 to 0xebd81ff0) [ 488.437599][ T7541] 1fa0: 0000000f 76ba8f30 00000004 76ba8f30 0000000f 00000000 [ 488.437632][ T7541] 1fc0: 0000000f 76ba8f30 00000004 00000003 002d0000 00000000 00006364 76ba90bc [ 488.437657][ T7541] 1fe0: 00000158 76ba8ed0 000d7d68 0012fe04 [ 488.641637][ T31] audit: type=1400 audit(488.580:316): avc: denied { map } for pid=7542 comm="syz.0.940" path="/proc/1407" dev="proc" ino=12469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 489.610200][ T7553] FAULT_INJECTION: forcing a failure. [ 489.610200][ T7553] name failslab, interval 1, probability 0, space 0, times 0 [ 489.610532][ T7553] CPU: 0 UID: 0 PID: 7553 Comm: syz.1.944 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 489.610568][ T7553] Hardware name: ARM-Versatile Express [ 489.610581][ T7553] Call trace: [ 489.610604][ T7553] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 489.610666][ T7553] r7:83b99800 r6:00000000 r5:60000013 r4:82257d0c [ 489.610675][ T7553] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 489.610703][ T7553] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 489.610733][ T7553] r5:83b99800 r4:8291bcc0 [ 489.610741][ T7553] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 489.610773][ T7553] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 489.610811][ T7553] r8:00000000 r7:83b99800 r6:00000dc0 r5:855c4a80 r4:830a8540 [ 489.610819][ T7553] [<80525620>] (should_failslab) from [<8050a0fc>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 489.610847][ T7553] [<8050a0b0>] (kmem_cache_alloc_noprof) from [<80779288>] (security_file_alloc+0x30/0x1dc) [ 489.610903][ T7553] r10:00000142 r9:8324d000 r8:82805c40 r7:84d1a180 r6:00000002 r5:855c4a80 [ 489.610942][ T7553] r4:855c4a80 [ 489.610953][ T7553] [<80779258>] (security_file_alloc) from [<805537f0>] (init_file+0x48/0x110) [ 489.610986][ T7553] r5:855c4a80 r4:855c4a80 [ 489.610993][ T7553] [<805537a8>] (init_file) from [<80553f38>] (alloc_empty_file+0x68/0x13c) [ 489.611056][ T7553] r7:84d1a180 r6:00000002 r5:855c4a80 r4:8245d828 [ 489.611067][ T7553] [<80553ed0>] (alloc_empty_file) from [<80566798>] (path_openat+0x40/0x11a0) [ 489.611103][ T7553] r8:df911e58 r7:df911e58 r6:df911f20 r5:83b99800 r4:ffffff9c [ 489.611135][ T7553] [<80566758>] (path_openat) from [<805679a4>] (do_filp_open+0xac/0x148) [ 489.611174][ T7553] r10:00000142 r9:8324d000 r8:00000001 r7:df911e58 r6:df911f20 r5:83b99800 [ 489.611184][ T7553] r4:ffffff9c [ 489.611192][ T7553] [<805678f8>] (do_filp_open) from [<8054e764>] (do_sys_openat2+0x90/0xe0) [ 489.611227][ T7553] r9:83b99800 r8:8020029c r7:ffffff9c r6:df911f58 r5:8324d000 r4:00000004 [ 489.611236][ T7553] [<8054e6d4>] (do_sys_openat2) from [<8054eb8c>] (sys_openat+0x98/0xd4) [ 489.611285][ T7553] r7:00000142 r6:00000000 r5:0018562c r4:ffffff9c [ 489.611296][ T7553] [<8054eaf4>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 489.611321][ T7553] Exception stack(0xdf911fa8 to 0xdf911ff0) [ 489.611344][ T7553] 1fa0: 00000002 0018562c ffffff9c 0018562c 00000002 00000000 [ 489.611363][ T7553] 1fc0: 00000002 0018562c 00000000 00000142 00000000 00000000 00006364 76be80bc [ 489.611377][ T7553] 1fe0: 20000540 76be5dd8 000d7d68 0012fd28 [ 489.611389][ T7553] r5:0018562c r4:00000002 [ 490.609497][ T47] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 490.775173][ T47] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 490.775414][ T47] usb 2-1: can't read configurations, error -71 [ 491.563277][ T31] audit: type=1400 audit(491.500:317): avc: denied { getopt } for pid=7572 comm="syz.0.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 491.749722][ T7574] FAULT_INJECTION: forcing a failure. [ 491.749722][ T7574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.750994][ T7574] CPU: 1 UID: 0 PID: 7574 Comm: syz.1.948 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 491.751072][ T7574] Hardware name: ARM-Versatile Express [ 491.751123][ T7574] Call trace: [ 491.751145][ T7574] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 491.751207][ T7574] r7:00000000 r6:00000000 r5:60000013 r4:82257d0c [ 491.751216][ T7574] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 491.751246][ T7574] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 491.751276][ T7574] r5:83b83000 r4:82951710 [ 491.751284][ T7574] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 491.751314][ T7574] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 491.751349][ T7574] r8:76be7f30 r7:00000000 r6:00000000 r5:ec859f68 r4:00000002 [ 491.751357][ T7574] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 491.751383][ T7574] [<8095f694>] (should_fail_usercopy) from [<8058cc58>] (simple_read_from_buffer+0x80/0x13c) [ 491.751414][ T7574] [<8058cbd8>] (simple_read_from_buffer) from [<806041f0>] (proc_fail_nth_read+0xb8/0x100) [ 491.751508][ T7574] r10:00000001 r9:80604138 r8:00000002 r7:ec859f68 r6:0000000f r5:76be7f30 [ 491.751524][ T7574] r4:83b83000 r3:ec859e9f [ 491.751532][ T7574] [<80604138>] (proc_fail_nth_read) from [<805517a0>] (vfs_read+0x98/0x320) [ 491.751601][ T7574] r8:76be7f30 r7:ec859f68 r6:83b83000 r5:0000000f r4:857666c0 [ 491.751610][ T7574] [<80551708>] (vfs_read) from [<80552440>] (ksys_read+0x74/0xe4) [ 491.751645][ T7574] r10:00000003 r9:83b83000 r8:8020029c r7:00000000 r6:00000000 r5:857666c0 [ 491.751655][ T7574] r4:857666c3 [ 491.751663][ T7574] [<805523cc>] (ksys_read) from [<805524c0>] (sys_read+0x10/0x14) [ 491.751694][ T7574] r7:00000003 r6:00000004 r5:76be7f30 r4:0000000f [ 491.751717][ T7574] [<805524b0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 491.751744][ T7574] Exception stack(0xec859fa8 to 0xec859ff0) [ 491.751764][ T7574] 9fa0: 0000000f 76be7f30 00000004 76be7f30 0000000f 00000000 [ 491.751782][ T7574] 9fc0: 0000000f 76be7f30 00000004 00000003 002d0000 00000000 00006364 76be80bc [ 491.751796][ T7574] 9fe0: 00000158 76be7ed0 000d7d68 0012fe04 [ 492.550120][ T31] audit: type=1400 audit(492.490:318): avc: denied { shutdown } for pid=7577 comm="syz.1.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 492.625872][ T31] audit: type=1400 audit(492.560:319): avc: denied { create } for pid=7577 comm="syz.1.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 496.949586][ T9] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 497.150677][ T9] usb 2-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 497.150907][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 497.165866][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 497.166144][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.166396][ T9] usb 2-1: Product: syz [ 497.166526][ T9] usb 2-1: Manufacturer: syz [ 497.166638][ T9] usb 2-1: SerialNumber: syz [ 497.214481][ T7596] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 497.536076][ T7609] FAULT_INJECTION: forcing a failure. [ 497.536076][ T7609] name failslab, interval 1, probability 0, space 0, times 0 [ 497.542865][ T7609] CPU: 1 UID: 0 PID: 7609 Comm: syz.0.957 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 497.542981][ T7609] Hardware name: ARM-Versatile Express [ 497.543009][ T7609] Call trace: [ 497.543058][ T7609] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 497.543222][ T7609] r7:841bd400 r6:00000000 r5:60000113 r4:82257d0c [ 497.543242][ T7609] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 497.543305][ T7609] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 497.543429][ T7609] r5:841bd400 r4:8291bcc0 [ 497.543452][ T7609] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 497.543516][ T7609] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 497.543592][ T7609] r8:00000000 r7:841bd400 r6:00000cc0 r5:200000c0 r4:830a8a80 [ 497.543668][ T7609] [<80525620>] (should_failslab) from [<8050a0fc>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 497.543752][ T7609] [<8050a0b0>] (kmem_cache_alloc_noprof) from [<80560b4c>] (getname_flags.part.0+0x28/0x18c) [ 497.543837][ T7609] r10:000001b5 r9:841bd400 r8:b5403587 r7:00000000 r6:8245d848 r5:200000c0 [ 497.543898][ T7609] r4:200000c0 [ 497.543924][ T7609] [<80560b24>] (getname_flags.part.0) from [<80565c34>] (getname_flags+0x3c/0x50) [ 497.544003][ T7609] r9:841bd400 r8:b5403587 r7:ffffff9c r6:dfa4df60 r5:00000000 r4:200000c0 [ 497.544024][ T7609] [<80565bf8>] (getname_flags) from [<8054e734>] (do_sys_openat2+0x60/0xe0) [ 497.544128][ T7609] r5:200000c0 r4:00000000 [ 497.544170][ T7609] [<8054e6d4>] (do_sys_openat2) from [<8054eca4>] (sys_openat2+0xdc/0x158) [ 497.544269][ T7609] r7:20000080 r6:200000c0 r5:841bd400 r4:ffffff9c [ 497.544289][ T7609] [<8054ebc8>] (sys_openat2) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 497.544395][ T7609] Exception stack(0xdfa4dfa8 to 0xdfa4dff0) [ 497.544448][ T7609] dfa0: 00000000 00000000 ffffff9c 200000c0 20000080 00000018 [ 497.544490][ T7609] dfc0: 00000000 00000000 0012fee0 000001b5 002d0000 00000000 00006364 76bca0bc [ 497.544521][ T7609] dfe0: 76bc9ec0 76bc9eb0 0001939c 00131f30 [ 497.544617][ T7609] r8:8020029c r7:000001b5 r6:0012fee0 r5:00000000 r4:00000000 [ 497.681165][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 497.684712][ T9] usb 2-1: USB disconnect, device number 39 [ 497.688639][ T9] usblp0: removed [ 498.420773][ T31] audit: type=1400 audit(498.360:320): avc: denied { relabelfrom } for pid=7629 comm="syz.1.961" name="LLC" dev="sockfs" ino=12556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 498.422045][ T7632] SELinux: Context system_u:object_r:restorecond_exec_t:s0 is not valid (left unmapped). [ 498.422988][ T31] audit: type=1400 audit(498.360:321): avc: denied { relabelto } for pid=7629 comm="syz.1.961" name="LLC" dev="sockfs" ino=12556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=llc_socket permissive=1 trawcon="system_u:object_r:restorecond_exec_t:s0" [ 498.500998][ T31] audit: type=1400 audit(498.440:322): avc: denied { getopt } for pid=7629 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 501.651174][ T31] audit: type=1400 audit(501.590:323): avc: denied { read } for pid=7646 comm="syz.0.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 501.899689][ T7652] fuse: Unknown parameter 'use00000000000000000000' [ 502.712624][ T31] audit: type=1400 audit(502.650:324): avc: denied { write } for pid=7653 comm="syz.1.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 505.305571][ T7665] FAULT_INJECTION: forcing a failure. [ 505.305571][ T7665] name failslab, interval 1, probability 0, space 0, times 0 [ 505.305873][ T7665] CPU: 0 UID: 0 PID: 7665 Comm: syz.0.970 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 505.305950][ T7665] Hardware name: ARM-Versatile Express [ 505.305966][ T7665] Call trace: [ 505.305988][ T7665] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 505.306053][ T7665] r7:00000c40 r6:00000000 r5:60000013 r4:82257d0c [ 505.306063][ T7665] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 505.306095][ T7665] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 505.306127][ T7665] r5:8398c800 r4:8291bcc0 [ 505.306136][ T7665] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 505.306171][ T7665] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 505.306211][ T7665] r8:8398c800 r7:00000c40 r6:85766268 r5:00001000 r4:830016c0 [ 505.306220][ T7665] [<80525620>] (should_failslab) from [<8050a480>] (__kmalloc_noprof+0x9c/0x458) [ 505.306249][ T7665] [<8050a3e4>] (__kmalloc_noprof) from [<807bc2ac>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 505.306364][ T7665] r10:8398c800 r9:83351000 r8:00000000 r7:8368d220 r6:85766268 r5:00001000 [ 505.306433][ T7665] r4:00000000 [ 505.306493][ T7665] [<807bc270>] (tomoyo_realpath_from_path) from [<807b83f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 505.306541][ T7665] r10:8398c800 r9:00000000 r8:85766240 r7:0000f503 r6:00000004 r5:81cd56c4 [ 505.306604][ T7665] r4:85766268 r3:826c0240 [ 505.306683][ T7665] [<807b8324>] (tomoyo_path_number_perm) from [<807bccd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 505.306788][ T7665] r9:00000004 r8:85766240 r7:00000000 r6:00000000 r5:0000f503 r4:85766240 [ 505.306818][ T7665] [<807bccb4>] (tomoyo_file_ioctl) from [<8076a70c>] (security_file_ioctl+0x64/0x1e4) [ 505.306981][ T7665] [<8076a6a8>] (security_file_ioctl) from [<8056b32c>] (sys_ioctl+0x4c/0xd84) [ 505.307131][ T7665] r7:00000000 r6:85766241 r5:00000000 r4:0000f503 [ 505.307792][ T7665] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 505.307825][ T7665] Exception stack(0xdfcc5fa8 to 0xdfcc5ff0) [ 505.307848][ T7665] 5fa0: 00000000 00000000 00000004 0000f503 00000000 00000000 [ 505.308829][ T7665] 5fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b670bc [ 505.310139][ T7665] 5fe0: 76b66ec0 76b66eb0 0001939c 00131f30 [ 505.310224][ T7665] r10:00000036 r9:8398c800 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 505.310252][ T7665] r4:00000000 [ 505.350916][ T7665] ERROR: Out of memory at tomoyo_realpath_from_path. [ 506.915269][ T7670] fuse: Unknown parameter 'user_i00000000000000000000' [ 507.015054][ T7672] SELinux: Context system_u:object_r:hald_var_lib_t:s0 is not valid (left unmapped). [ 507.017004][ T31] audit: type=1400 audit(506.950:325): avc: denied { relabelto } for pid=7671 comm="syz.0.973" name="dlm-monitor" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0" [ 507.017666][ T31] audit: type=1400 audit(506.950:326): avc: denied { associate } for pid=7671 comm="syz.0.973" name="dlm-monitor" dev="devtmpfs" ino=86 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_var_lib_t:s0" [ 507.213438][ T7674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7674 comm=syz.0.974 [ 507.363010][ T7676] FAULT_INJECTION: forcing a failure. [ 507.363010][ T7676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.363274][ T7676] CPU: 0 UID: 0 PID: 7676 Comm: syz.0.975 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 507.363308][ T7676] Hardware name: ARM-Versatile Express [ 507.363321][ T7676] Call trace: [ 507.363340][ T7676] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 507.363396][ T7676] r7:76bc8e1c r6:00000000 r5:60000013 r4:82257d0c [ 507.363405][ T7676] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 507.363433][ T7676] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 507.363462][ T7676] r5:83b81800 r4:82951710 [ 507.363473][ T7676] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 507.363536][ T7676] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 507.363570][ T7676] r8:8577f6c1 r7:76bc8e1c r6:dfc21ee4 r5:0000000c r4:0000000c [ 507.363578][ T7676] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 507.363632][ T7676] [<8095f694>] (should_fail_usercopy) from [<8151a594>] (move_addr_to_kernel+0x34/0xf8) [ 507.363711][ T7676] [<8151a560>] (move_addr_to_kernel) from [<8151babc>] (__sys_sendto+0xd0/0x15c) [ 507.363750][ T7676] r7:76bc8e1c r6:836e7680 r5:00000000 r4:00000000 [ 507.363787][ T7676] [<8151b9ec>] (__sys_sendto) from [<8151bb64>] (sys_sendto+0x1c/0x24) [ 507.363864][ T7676] r9:83b81800 r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76bc8e1c [ 507.363875][ T7676] [<8151bb48>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 507.363925][ T7676] Exception stack(0xdfc21fa8 to 0xdfc21ff0) [ 507.363960][ T7676] 1fa0: 76bc8e1c 0000000c 00000003 76bc8eb0 00000020 00000000 [ 507.363996][ T7676] 1fc0: 76bc8e1c 0000000c 00000000 00000122 00000003 00000000 76bc8eb0 76bca0bc [ 507.364047][ T7676] 1fe0: 00000000 76bc8df0 000d7d68 001343c8 [ 507.571312][ T7680] fuse: Unknown parameter 'user_i00000000000000000000' [ 508.513832][ T7696] FAULT_INJECTION: forcing a failure. [ 508.513832][ T7696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.514744][ T7696] CPU: 1 UID: 0 PID: 7696 Comm: syz.1.983 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 508.514813][ T7696] Hardware name: ARM-Versatile Express [ 508.514828][ T7696] Call trace: [ 508.514850][ T7696] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 508.514914][ T7696] r7:00000000 r6:00000000 r5:60000013 r4:82257d0c [ 508.514926][ T7696] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 508.514960][ T7696] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 508.514993][ T7696] r5:841bd400 r4:82951710 [ 508.515003][ T7696] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 508.515047][ T7696] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 508.515085][ T7696] r8:76be7f30 r7:00000000 r6:00000000 r5:dfdbdf68 r4:00000002 [ 508.515095][ T7696] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 508.515126][ T7696] [<8095f694>] (should_fail_usercopy) from [<8058cc58>] (simple_read_from_buffer+0x80/0x13c) [ 508.515162][ T7696] [<8058cbd8>] (simple_read_from_buffer) from [<806041f0>] (proc_fail_nth_read+0xb8/0x100) [ 508.515204][ T7696] r10:00000001 r9:80604138 r8:00000002 r7:dfdbdf68 r6:0000000f r5:76be7f30 [ 508.515218][ T7696] r4:841bd400 r3:dfdbde9f [ 508.515227][ T7696] [<80604138>] (proc_fail_nth_read) from [<805517a0>] (vfs_read+0x98/0x320) [ 508.515268][ T7696] r8:76be7f30 r7:dfdbdf68 r6:841bd400 r5:0000000f r4:85766cc0 [ 508.515278][ T7696] [<80551708>] (vfs_read) from [<80552440>] (ksys_read+0x74/0xe4) [ 508.515316][ T7696] r10:00000003 r9:841bd400 r8:8020029c r7:00000000 r6:00000000 r5:85766cc0 [ 508.515327][ T7696] r4:85766cc3 [ 508.515336][ T7696] [<805523cc>] (ksys_read) from [<805524c0>] (sys_read+0x10/0x14) [ 508.515370][ T7696] r7:00000003 r6:00000003 r5:76be7f30 r4:0000000f [ 508.515379][ T7696] [<805524b0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 508.515408][ T7696] Exception stack(0xdfdbdfa8 to 0xdfdbdff0) [ 508.515431][ T7696] dfa0: 0000000f 76be7f30 00000003 76be7f30 0000000f 00000000 [ 508.515453][ T7696] dfc0: 0000000f 76be7f30 00000003 00000003 002d0000 00000000 00006364 76be80bc [ 508.515469][ T7696] dfe0: 00000158 76be7ed0 000d7d68 0012fe04 [ 513.430965][ T31] audit: type=1400 audit(513.370:327): avc: denied { getopt } for pid=7728 comm="syz.1.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 514.529761][ T7733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7733 comm=syz.1.990 [ 518.169331][ T47] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 518.344414][ T47] usb 2-1: unable to get BOS descriptor or descriptor too short [ 518.346498][ T47] usb 2-1: not running at top speed; connect to a high speed hub [ 518.354299][ T47] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 518.354927][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.355606][ T47] usb 2-1: Product: syz [ 518.356012][ T47] usb 2-1: Manufacturer: syz [ 518.356409][ T47] usb 2-1: SerialNumber: syz [ 518.576560][ T47] cdc_ncm 2-1:1.0: bind() failure [ 518.579955][ T47] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 518.580526][ T47] cdc_ncm 2-1:1.1: bind() failure [ 518.584561][ T47] usb 2-1: USB disconnect, device number 40 [ 518.725245][ T7761] FAULT_INJECTION: forcing a failure. [ 518.725245][ T7761] name failslab, interval 1, probability 0, space 0, times 0 [ 518.725635][ T7761] CPU: 1 UID: 0 PID: 7761 Comm: syz.0.994 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 518.725677][ T7761] Hardware name: ARM-Versatile Express [ 518.725691][ T7761] Call trace: [ 518.725713][ T7761] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 518.725783][ T7761] r7:83989800 r6:00000000 r5:60000013 r4:82257d0c [ 518.725792][ T7761] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 518.725820][ T7761] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 518.725849][ T7761] r5:83989800 r4:8291bcc0 [ 518.725857][ T7761] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 518.725887][ T7761] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 518.725924][ T7761] r8:00000000 r7:83989800 r6:00000dc0 r5:85766e40 r4:830a8540 [ 518.725932][ T7761] [<80525620>] (should_failslab) from [<8050a0fc>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 518.725961][ T7761] [<8050a0b0>] (kmem_cache_alloc_noprof) from [<80779288>] (security_file_alloc+0x30/0x1dc) [ 518.726007][ T7761] r10:00000008 r9:838a5000 r8:82805c40 r7:83c53200 r6:00000241 r5:85766e40 [ 518.726017][ T7761] r4:85766e40 [ 518.726024][ T7761] [<80779258>] (security_file_alloc) from [<805537f0>] (init_file+0x48/0x110) [ 518.726054][ T7761] r5:85766e40 r4:85766e40 [ 518.726062][ T7761] [<805537a8>] (init_file) from [<80553f38>] (alloc_empty_file+0x68/0x13c) [ 518.726093][ T7761] r7:83c53200 r6:00000241 r5:85766e40 r4:8245d828 [ 518.726101][ T7761] [<80553ed0>] (alloc_empty_file) from [<80566798>] (path_openat+0x40/0x11a0) [ 518.726136][ T7761] r8:e0281e58 r7:e0281e58 r6:e0281f20 r5:83989800 r4:ffffff9c [ 518.726144][ T7761] [<80566758>] (path_openat) from [<805679a4>] (do_filp_open+0xac/0x148) [ 518.726179][ T7761] r10:00000008 r9:838a5000 r8:00000001 r7:e0281e58 r6:e0281f20 r5:83989800 [ 518.726189][ T7761] r4:ffffff9c [ 518.726196][ T7761] [<805678f8>] (do_filp_open) from [<8054e764>] (do_sys_openat2+0x90/0xe0) [ 518.726230][ T7761] r9:83989800 r8:8020029c r7:ffffff9c r6:e0281f58 r5:838a5000 r4:00000005 [ 518.726238][ T7761] [<8054e6d4>] (do_sys_openat2) from [<8054ed8c>] (sys_creat+0x6c/0x90) [ 518.726268][ T7761] r7:00000008 r6:0012fee0 r5:00000000 r4:200001c0 [ 518.726276][ T7761] [<8054ed20>] (sys_creat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 518.726301][ T7761] Exception stack(0xe0281fa8 to 0xe0281ff0) [ 518.726322][ T7761] 1fa0: 00000000 00000000 200001c0 00000008 00000000 00000000 [ 518.726340][ T7761] 1fc0: 00000000 00000000 0012fee0 00000008 002d0000 00000000 00006364 76ba90bc [ 518.726354][ T7761] 1fe0: 76ba8ec0 76ba8eb0 0001939c 00131f30 [ 518.726365][ T7761] r4:00000000 [ 520.789430][ T47] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 520.949808][ T47] usb 2-1: device descriptor read/64, error -71 [ 521.189371][ T47] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 521.319138][ T47] usb 2-1: device descriptor read/64, error -71 [ 521.429722][ T47] usb usb2-port1: attempt power cycle [ 521.779273][ T47] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 521.800530][ T47] usb 2-1: device descriptor read/8, error -71 [ 522.049416][ T47] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 522.079904][ T47] usb 2-1: device descriptor read/8, error -71 [ 522.189384][ T47] usb usb2-port1: unable to enumerate USB device [ 524.630345][ T7784] raw_sendmsg: syz.0.1001 forgot to set AF_INET. Fix it! [ 524.877290][ T31] audit: type=1400 audit(524.810:328): avc: denied { name_connect } for pid=7787 comm="syz.0.1002" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 525.171724][ T7793] FAULT_INJECTION: forcing a failure. [ 525.171724][ T7793] name failslab, interval 1, probability 0, space 0, times 0 [ 525.172636][ T7793] CPU: 0 UID: 0 PID: 7793 Comm: syz.0.1003 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 525.172703][ T7793] Hardware name: ARM-Versatile Express [ 525.172716][ T7793] Call trace: [ 525.172743][ T7793] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 525.172809][ T7793] r7:00404dc0 r6:00000000 r5:60000013 r4:82257d0c [ 525.172819][ T7793] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 525.172849][ T7793] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 525.172879][ T7793] r5:8398ec00 r4:8291bcc0 [ 525.172887][ T7793] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 525.172919][ T7793] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 525.172958][ T7793] r8:00404dc0 r7:00404dc0 r6:00000000 r5:83002240 r4:00000140 [ 525.172967][ T7793] [<80525620>] (should_failslab) from [<80508c60>] (__kvmalloc_node_noprof+0xe0/0x59c) [ 525.172996][ T7793] [<80508b80>] (__kvmalloc_node_noprof) from [<81549070>] (alloc_netdev_mqs+0x264/0x4ec) [ 525.173038][ T7793] r10:82c1f980 r9:00000140 r8:818ed5d0 r7:e0281e84 r6:0000074c r5:00000001 [ 525.173049][ T7793] r4:84faf000 [ 525.173056][ T7793] [<81548e0c>] (alloc_netdev_mqs) from [<818ebb50>] (vlan_ioctl_handler+0x3a8/0x4a0) [ 525.173099][ T7793] r10:8398ec00 r9:00000001 r8:8521e000 r7:85308d80 r6:00000000 r5:00000000 [ 525.173109][ T7793] r4:00000000 [ 525.173116][ T7793] [<818eb7a8>] (vlan_ioctl_handler) from [<8151a8d8>] (sock_ioctl+0x1f8/0x600) [ 525.173153][ T7793] r9:00000003 r8:8577fb40 r7:836e7900 r6:85308d80 r5:20000900 r4:82c1f8e4 [ 525.173162][ T7793] [<8151a6e0>] (sock_ioctl) from [<8056b418>] (sys_ioctl+0x138/0xd84) [ 525.173219][ T7793] r9:00000003 r8:8577fb40 r7:20000900 r6:8577fb41 r5:00000000 r4:00008982 [ 525.173230][ T7793] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 525.173255][ T7793] Exception stack(0xe0281fa8 to 0xe0281ff0) [ 525.173276][ T7793] 1fa0: 00000000 00000000 00000003 00008982 20000900 00000000 [ 525.173302][ T7793] 1fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76bca0bc [ 525.173316][ T7793] 1fe0: 76bc9ec0 76bc9eb0 0001939c 00131f30 [ 525.173336][ T7793] r10:00000036 r9:8398ec00 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 525.173346][ T7793] r4:00000000 [ 525.277587][ T31] audit: type=1400 audit(525.210:329): avc: denied { setopt } for pid=7796 comm="syz.0.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 525.444563][ T31] audit: type=1400 audit(525.370:330): avc: denied { connect } for pid=7798 comm="syz.0.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 525.799246][ T47] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 525.999270][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 526.003425][ T47] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 526.003610][ T47] usb 1-1: config 0 has no interface number 0 [ 526.003756][ T47] usb 1-1: config 0 interface 184 has no altsetting 0 [ 526.009956][ T47] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 526.010150][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.010320][ T47] usb 1-1: Product: syz [ 526.010365][ T47] usb 1-1: Manufacturer: syz [ 526.010397][ T47] usb 1-1: SerialNumber: syz [ 526.012943][ T47] usb 1-1: config 0 descriptor?? [ 526.028166][ T47] smsc75xx v1.0.0 [ 531.611609][ T7817] FAULT_INJECTION: forcing a failure. [ 531.611609][ T7817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.612042][ T7817] CPU: 1 UID: 0 PID: 7817 Comm: syz.1.1009 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 531.612085][ T7817] Hardware name: ARM-Versatile Express [ 531.612099][ T7817] Call trace: [ 531.612166][ T7817] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 531.612255][ T7817] r7:20002740 r6:00000000 r5:60000013 r4:82257d0c [ 531.612328][ T7817] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 531.612364][ T7817] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 531.612422][ T7817] r5:83ab3c00 r4:82951710 [ 531.612441][ T7817] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 531.612538][ T7817] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 531.612592][ T7817] r8:00000000 r7:20002740 r6:843c86c0 r5:00000000 r4:e0111f20 [ 531.612603][ T7817] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 531.612684][ T7817] [<8095f694>] (should_fail_usercopy) from [<808aeb9c>] (_copy_from_iter+0x6c/0x7c8) [ 531.612788][ T7817] [<808aeb30>] (_copy_from_iter) from [<816453b8>] (netlink_sendmsg+0x18c/0x444) [ 531.612889][ T7817] r10:00000000 r9:00000000 r8:e0111f30 r7:85531800 r6:00000014 r5:830d96c0 [ 531.612990][ T7817] r4:e0111f20 [ 531.613079][ T7817] [<8164522c>] (netlink_sendmsg) from [<81519cbc>] (__sock_sendmsg+0x44/0x78) [ 531.613151][ T7817] r10:00000000 r9:e0111dc4 r8:e0111dc4 r7:00000000 r6:84964c80 r5:e0111f20 [ 531.613339][ T7817] r4:00000000 [ 531.613482][ T7817] [<81519c78>] (__sock_sendmsg) from [<8151a52c>] (____sys_sendmsg+0x298/0x2cc) [ 531.613579][ T7817] r7:00000000 r6:84964c80 r5:00004000 r4:e0111f20 [ 531.613601][ T7817] [<8151a294>] (____sys_sendmsg) from [<8151c2cc>] (___sys_sendmsg+0x9c/0xd0) [ 531.613691][ T7817] r10:e0111e24 r9:200027c0 r8:00004000 r7:00000000 r6:84964c80 r5:e0111f20 [ 531.613771][ T7817] r4:00000000 [ 531.613789][ T7817] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 531.613877][ T7817] r10:00000128 r9:83ab3c00 r8:85766000 r7:00004000 r6:200027c0 r5:85766001 [ 531.613918][ T7817] r4:00000004 [ 531.613959][ T7817] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 531.614049][ T7817] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 531.614135][ T7817] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 531.614202][ T7817] Exception stack(0xe0111fa8 to 0xe0111ff0) [ 531.614354][ T7817] 1fa0: 00000000 00000000 00000004 200027c0 00004000 00000000 [ 531.614440][ T7817] 1fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76be80bc [ 531.614500][ T7817] 1fe0: 76be7ec0 76be7eb0 0001939c 00131f30 [ 531.819515][ T47] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -110 [ 531.819843][ T47] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -110 [ 531.819961][ T47] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 531.820207][ T47] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -110 [ 532.009676][ T7820] SELinux: Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped). [ 532.010944][ T31] audit: type=1400 audit(531.950:331): avc: denied { relabelto } for pid=7819 comm="syz.1.1010" name="userio" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:utempter_exec_t:s0" [ 532.012504][ T31] audit: type=1400 audit(531.950:332): avc: denied { associate } for pid=7819 comm="syz.1.1010" name="userio" dev="devtmpfs" ino=692 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:utempter_exec_t:s0" [ 536.506784][ T7835] FAULT_INJECTION: forcing a failure. [ 536.506784][ T7835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.510260][ T7835] CPU: 0 UID: 0 PID: 7835 Comm: syz.1.1015 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 536.510410][ T7835] Hardware name: ARM-Versatile Express [ 536.510442][ T7835] Call trace: [ 536.510493][ T7835] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 536.510620][ T7835] r7:00000000 r6:00000000 r5:60000113 r4:82257d0c [ 536.510642][ T7835] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 536.510711][ T7835] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 536.510779][ T7835] r5:8398e000 r4:82951710 [ 536.510799][ T7835] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 536.510866][ T7835] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 536.510940][ T7835] r8:76be7f30 r7:00000000 r6:00000000 r5:e0295f68 r4:00000002 [ 536.510962][ T7835] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 536.511020][ T7835] [<8095f694>] (should_fail_usercopy) from [<8058cc58>] (simple_read_from_buffer+0x80/0x13c) [ 536.511101][ T7835] [<8058cbd8>] (simple_read_from_buffer) from [<806041f0>] (proc_fail_nth_read+0xb8/0x100) [ 536.511186][ T7835] r10:00000001 r9:80604138 r8:00000002 r7:e0295f68 r6:0000000f r5:76be7f30 [ 536.511213][ T7835] r4:8398e000 r3:e0295e9f [ 536.511232][ T7835] [<80604138>] (proc_fail_nth_read) from [<805517a0>] (vfs_read+0x98/0x320) [ 536.511313][ T7835] r8:76be7f30 r7:e0295f68 r6:8398e000 r5:0000000f r4:8577fd80 [ 536.511336][ T7835] [<80551708>] (vfs_read) from [<80552440>] (ksys_read+0x74/0xe4) [ 536.511411][ T7835] r10:00000003 r9:8398e000 r8:8020029c r7:00000000 r6:00000000 r5:8577fd80 [ 536.511437][ T7835] r4:8577fd83 [ 536.511455][ T7835] [<805523cc>] (ksys_read) from [<805524c0>] (sys_read+0x10/0x14) [ 536.511523][ T7835] r7:00000003 r6:00000004 r5:76be7f30 r4:0000000f [ 536.511544][ T7835] [<805524b0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 536.511601][ T7835] Exception stack(0xe0295fa8 to 0xe0295ff0) [ 536.511649][ T7835] 5fa0: 0000000f 76be7f30 00000004 76be7f30 0000000f 00000000 [ 536.511691][ T7835] 5fc0: 0000000f 76be7f30 00000004 00000003 002d0000 00000000 00006364 76be80bc [ 536.511724][ T7835] 5fe0: 00000158 76be7ed0 000d7d68 0012fe04 [ 538.248317][ T31] audit: type=1400 audit(538.180:333): avc: denied { execute_no_trans } for pid=7836 comm="syz.1.1016" path="/437/file0" dev="tmpfs" ino=2355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 538.531962][ T23] usb 1-1: USB disconnect, device number 24 [ 538.786096][ T31] audit: type=1400 audit(538.720:334): avc: denied { ioctl } for pid=7850 comm="syz.1.1018" path="socket:[13088]" dev="sockfs" ino=13088 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 539.266973][ T31] audit: type=1400 audit(539.200:335): avc: denied { setattr } for pid=7862 comm="syz.1.1023" name="UDP-Lite" dev="sockfs" ino=13102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 539.285929][ T9] hid-generic 0007:0004:0005.0006: item fetching failed at offset 21/132 [ 539.286455][ T9] hid-generic 0007:0004:0005.0006: probe with driver hid-generic failed with error -22 [ 552.044300][ T31] audit: type=1400 audit(551.980:336): avc: denied { read } for pid=7943 comm="syz.0.1044" name="dlm-monitor" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0" [ 552.047290][ T31] audit: type=1400 audit(551.980:337): avc: denied { open } for pid=7943 comm="syz.0.1044" path="/dev/dlm-monitor" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0" [ 552.051708][ T31] audit: type=1400 audit(551.980:338): avc: denied { ioctl } for pid=7943 comm="syz.0.1044" path="/dev/dlm-monitor" dev="devtmpfs" ino=86 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0" [ 552.607327][ T3157] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.672550][ T3157] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.740750][ T3157] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.795726][ T3157] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.025485][ T3157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.034600][ T3157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.038175][ T3157] bond0 (unregistering): Released all slaves [ 553.102123][ T3157] hsr_slave_0: left promiscuous mode [ 553.103887][ T3157] hsr_slave_1: left promiscuous mode [ 553.114980][ T3157] veth1_macvtap: left promiscuous mode [ 553.115695][ T3157] veth0_macvtap: left promiscuous mode [ 553.116350][ T3157] veth1_vlan: left promiscuous mode [ 553.116949][ T3157] veth0_vlan: left promiscuous mode [ 553.207899][ T3157] pim6reg (unregistering): left allmulticast mode [ 554.134132][ T7956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.136908][ T7956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.786265][ T7956] hsr_slave_0: entered promiscuous mode [ 554.787154][ T7956] hsr_slave_1: entered promiscuous mode [ 555.266205][ T7956] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 555.281534][ T7956] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 555.284613][ T7956] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 555.293209][ T7956] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 555.828625][ T7956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.830681][ T7956] veth0_vlan: entered promiscuous mode [ 557.851893][ T7956] veth1_vlan: entered promiscuous mode [ 557.922999][ T7956] veth0_macvtap: entered promiscuous mode [ 557.933500][ T7956] veth1_macvtap: entered promiscuous mode [ 557.993065][ T7956] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.993415][ T7956] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.993498][ T7956] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.993578][ T7956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.102782][ T31] audit: type=1400 audit(558.040:339): avc: denied { mounton } for pid=7956 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 565.427432][ T8412] serio: Serial port ptm0 [ 566.564584][ T31] audit: type=1400 audit(566.500:340): avc: denied { connect } for pid=8402 comm="syz.1.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 569.696758][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 572.549407][ T23] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 572.704271][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.704512][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.704679][ T23] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 572.704823][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.708520][ T23] usb 1-1: config 0 descriptor?? [ 573.139514][ T8436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.146598][ T8436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.155477][ T23] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 573.156819][ T23] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 573.157825][ T23] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 573.159644][ T23] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 573.159886][ T23] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 573.160444][ T23] cm6533_jd 0003:0D8C:0022.0007: No inputs registered, leaving [ 573.165360][ T23] cm6533_jd 0003:0D8C:0022.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 573.423440][ T23] usb 1-1: USB disconnect, device number 25 [ 574.679400][ T109] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 574.839183][ T109] usb 1-1: Using ep0 maxpacket: 16 [ 574.905935][ T109] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 574.907058][ T109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 574.951623][ T109] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 574.951834][ T109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.952004][ T109] usb 1-1: Product: syz [ 574.952139][ T109] usb 1-1: Manufacturer: syz [ 574.952178][ T109] usb 1-1: SerialNumber: syz [ 574.954174][ T109] usb 1-1: config 0 descriptor?? [ 585.207459][ T109] usb 1-1: USB disconnect, device number 26 [ 600.508237][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'. [ 606.249107][ T23] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 606.399158][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 606.403745][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.404477][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.406210][ T23] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 606.406866][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.410420][ T23] usb 1-1: config 0 descriptor?? [ 606.639723][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 606.639993][ T23] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 606.643427][ T23] usb 1-1: USB disconnect, device number 27 [ 609.449769][ T8558] netlink: 4580 bytes leftover after parsing attributes in process `syz.1.1089'. [ 609.451671][ T8558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 609.451935][ T8558] IPv6: NLM_F_CREATE should be set when creating new route [ 609.452150][ T8558] IPv6: NLM_F_CREATE should be set when creating new route [ 629.759181][ T23] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 634.939798][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 634.942241][ T23] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 634.942836][ T23] usb 1-1: chopping to 0 config(s) [ 634.943310][ T23] usb 1-1: can't read configurations, error -32 [ 635.069472][ T23] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 635.219200][ T23] usb 1-1: device descriptor read/64, error -32 [ 635.329388][ T23] usb usb1-port1: attempt power cycle [ 635.669211][ T23] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 635.690206][ T23] usb 1-1: device descriptor read/8, error -32 [ 635.930583][ T23] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 635.959123][ T23] usb 1-1: device descriptor read/8, error -32 [ 636.069687][ T23] usb usb1-port1: unable to enumerate USB device [ 655.272591][ T31] audit: type=1400 audit(655.210:341): avc: denied { bind } for pid=8614 comm="syz.0.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 655.273731][ T31] audit: type=1400 audit(655.210:342): avc: denied { name_bind } for pid=8614 comm="syz.0.1106" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 655.275538][ T31] audit: type=1400 audit(655.210:343): avc: denied { node_bind } for pid=8614 comm="syz.0.1106" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 655.435334][ T8619] netlink: 'syz.0.1108': attribute type 1 has an invalid length. [ 655.481039][ T8619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 676.175538][ T31] audit: type=1400 audit(676.090:344): avc: denied { shutdown } for pid=8707 comm="syz.0.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 679.614496][ T8712] lo: entered allmulticast mode [ 679.616566][ T8712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 681.569156][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 681.709484][ T9] usb 1-1: device descriptor read/64, error -71 [ 681.979222][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 682.119391][ T9] usb 1-1: device descriptor read/64, error -71 [ 682.241904][ T9] usb usb1-port1: attempt power cycle [ 682.599739][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 682.631683][ T9] usb 1-1: device descriptor read/8, error -71 [ 682.889245][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 682.916244][ T9] usb 1-1: device descriptor read/8, error -71 [ 683.021002][ T9] usb usb1-port1: unable to enumerate USB device [ 692.290399][ T31] audit: type=1400 audit(692.230:345): avc: denied { nlmsg_write } for pid=8731 comm="syz.1.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 704.793455][ T31] audit: type=1400 audit(704.730:346): avc: denied { bind } for pid=8748 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 713.719400][ T47] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 713.895597][ T47] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 713.895813][ T47] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 713.895859][ T47] usb 1-1: Product: syz [ 713.895889][ T47] usb 1-1: SerialNumber: syz [ 713.898004][ T47] usb 1-1: config 0 descriptor?? [ 714.116313][ T47] hso 1-1:0.0: Failed to find BULK IN ep [ 714.315850][ T47] usb 1-1: USB disconnect, device number 36 [ 719.679337][ T8805] wg1: entered promiscuous mode [ 719.679711][ T8805] wg1: entered allmulticast mode [ 719.744323][ T31] audit: type=1400 audit(719.680:347): avc: denied { bind } for pid=8806 comm="syz.0.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 724.067460][ T31] audit: type=1400 audit(724.000:348): avc: denied { mount } for pid=8817 comm="syz.1.1158" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 724.247054][ T31] audit: type=1400 audit(724.180:349): avc: denied { unmount } for pid=3098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 748.277166][ T8865] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.284713][ T31] audit: type=1400 audit(748.210:350): avc: denied { lock } for pid=8862 comm="syz.0.1170" path="socket:[15001]" dev="sockfs" ino=15001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 782.579254][ T11] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 782.729376][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 782.734116][ T11] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 782.734337][ T11] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 782.734469][ T11] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 782.734667][ T11] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 782.734933][ T11] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 782.735175][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.955328][ T11] usb 1-1: GET_CAPABILITIES returned 0 [ 782.955780][ T11] usbtmc 1-1:16.0: can't read capabilities [ 783.169796][ T3776] usb 1-1: USB disconnect, device number 37 [ 800.820496][ T8946] 8<--- cut here --- [ 800.821782][ T8946] Unable to handle kernel NULL pointer dereference at virtual address 0000000e when read SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 800.822561][ T8946] [0000000e] *pgd=85891003, *pmd=df7a6003 [ 800.831959][ T31] audit: type=1400 audit(800.760:351): avc: denied { read } for pid=2906 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 800.856328][ T8946] [ 800.864258][ T8946] Internal error: Oops: 205 [#1] SMP ARM [ 800.864730][ T8946] Modules linked in: [ 800.865088][ T8946] CPU: 1 UID: 0 PID: 8946 Comm: syz.0.1192 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 800.865603][ T8946] Hardware name: ARM-Versatile Express [ 800.865917][ T8946] PC is at io_ring_buffers_peek+0x24/0x258 [ 800.866173][ T8946] LR is at io_buffers_peek+0x68/0x8c [ 800.866378][ T8946] pc : [<80889608>] lr : [<80889d4c>] psr: 20000013 [ 800.866616][ T8946] sp : df991d90 ip : df991dd8 fp : df991dd4 [ 800.866827][ T8946] r10: 00000362 r9 : 00000000 r8 : 8588e100 [ 800.867033][ T8946] r7 : 8594500c r6 : 85945000 r5 : df991e14 r4 : 85944000 [ 800.867282][ T8946] r3 : 00000001 r2 : 8594500c r1 : df991e14 r0 : 85944000 [ 800.867585][ T8946] Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 800.867880][ T8946] Control: 30c5387d Table: 855a3680 DAC: 00000000 [ 800.868129][ T8946] Register r0 information: slab io_kiocb start 85944000 pointer offset 0 size 192 [ 800.869044][ T8946] Register r1 information: 2-page vmalloc region starting at 0xdf990000 allocated at kernel_clone+0xac/0x3e4 [ 800.869653][ T8946] Register r2 information: slab kmalloc-256 start 85945000 pointer offset 12 size 256 [ 800.870355][ T8946] Register r3 information: non-paged memory [ 800.870632][ T8946] Register r4 information: slab io_kiocb start 85944000 pointer offset 0 size 192 [ 800.870969][ T8946] Register r5 information: 2-page vmalloc region starting at 0xdf990000 allocated at kernel_clone+0xac/0x3e4 [ 800.871330][ T8946] Register r6 information: slab kmalloc-256 start 85945000 pointer offset 0 size 256 [ 800.871668][ T8946] Register r7 information: slab kmalloc-256 start 85945000 pointer offset 12 size 256 [ 800.872005][ T8946] Register r8 information: slab kmalloc-64 start 8588e100 pointer offset 0 size 64 [ 800.872315][ T8946] Register r9 information: NULL pointer [ 800.872479][ T8946] Register r10 information: non-paged memory [ 800.872663][ T8946] Register r11 information: 2-page vmalloc region starting at 0xdf990000 allocated at kernel_clone+0xac/0x3e4 [ 800.873029][ T8946] Register r12 information: 2-page vmalloc region starting at 0xdf990000 allocated at kernel_clone+0xac/0x3e4 [ 800.873418][ T8946] Process syz.0.1192 (pid: 8946, stack limit = 0xdf990000) [ 800.873681][ T8946] Stack: (0xdf991d90 to 0xdf992000) [ 800.873833][ T8946] 1d80: 81a4c2d4 8030cb14 844e6100 00000001 [ 800.874107][ T8946] 1da0: 00010000 8594500c 00000000 85944000 df991e14 85945000 8594500c 00000000 [ 800.874354][ T8946] 1dc0: 80000001 00000362 df991dec df991dd8 80889d4c 808895f0 83639400 85944000 [ 800.874597][ T8946] 1de0: df991e54 df991df0 8089327c 80889cf0 00000000 df991dd8 85945000 cc8a3d55 [ 800.874855][ T8946] 1e00: 00010001 00000001 844e6128 00000000 00000000 8594500c 00000000 00000000 [ 800.875099][ T8946] 1e20: 00010001 cc8a3d55 df991e54 85944000 81cf0ca0 00000000 00000000 00000000 [ 800.875369][ T8946] 1e40: 80000001 8580a400 df991e7c df991e58 8088225c 80892fd4 85944000 80000001 [ 800.875620][ T8946] 1e60: 0000001b 81cf0b5c 855059c0 00000000 df991ebc df991e80 80886d2c 8088221c [ 800.875871][ T8946] 1e80: 85944240 85944300 859443c0 81cf0ca0 85944540 844e6000 8594406c 85944000 [ 800.876108][ T8946] 1ea0: 85900000 00000000 00000000 8580a400 df991f14 df991ec0 80887844 80886cf0 [ 800.876361][ T8946] 1ec0: 8088e200 81a4c278 00000000 00000000 00000800 00000800 81cf0b5c 00000800 [ 800.876618][ T8946] 1ee0: 844e6000 cc8a3d55 85505600 00000000 844e6000 00003516 85505600 00000000 [ 800.876871][ T8946] 1f00: 8580a400 00000000 df991fa4 df991f18 808882ec 80887644 ecac8b10 844e6040 [ 800.877122][ T8946] 1f20: 00000000 00000000 81a50050 81a4ff20 df991f54 df991f40 8026b438 8029ce24 [ 800.877396][ T8946] 1f40: df991fb0 40000000 df991f84 df991f58 802229dc 8026b3f4 00000000 8281d05c [ 800.877661][ T8946] 1f60: df991fb0 0014c490 ecac8b10 80222930 00000000 cc8a3d55 df991fac 00000000 [ 800.877913][ T8946] 1f80: 00000000 002e630c 000001aa 8020029c 8580a400 000001aa 00000000 df991fa8 [ 800.878166][ T8946] 1fa0: 80200060 808881c0 00000000 00000000 00000005 00003516 00000000 00000000 [ 800.878424][ T8946] 1fc0: 00000000 00000000 002e630c 000001aa 002d0000 00000000 00006364 76bd20bc [ 800.878668][ T8946] 1fe0: 76bd1ec0 76bd1eb0 0001939c 00131f30 60000010 00000005 00000000 00000000 [ 800.879035][ T8946] Call trace: [ 800.879248][ T8946] [<808895e4>] (io_ring_buffers_peek) from [<80889d4c>] (io_buffers_peek+0x68/0x8c) [ 800.879679][ T8946] r10:00000362 r9:80000001 r8:00000000 r7:8594500c r6:85945000 r5:df991e14 [ 800.880077][ T8946] r4:85944000 [ 800.880200][ T8946] [<80889ce4>] (io_buffers_peek) from [<8089327c>] (io_recv+0x2b4/0x46c) [ 800.880470][ T8946] r5:85944000 r4:83639400 [ 800.880604][ T8946] [<80892fc8>] (io_recv) from [<8088225c>] (__io_issue_sqe+0x4c/0x1c0) [ 800.880866][ T8946] r10:8580a400 r9:80000001 r8:00000000 r7:00000000 r6:00000000 r5:81cf0ca0 [ 800.881127][ T8946] r4:85944000 [ 800.881252][ T8946] [<80882210>] (__io_issue_sqe) from [<80886d2c>] (io_issue_sqe+0x48/0x59c) [ 800.881527][ T8946] r9:00000000 r8:855059c0 r7:81cf0b5c r6:0000001b r5:80000001 r4:85944000 [ 800.881759][ T8946] [<80886ce4>] (io_issue_sqe) from [<80887844>] (io_submit_sqes+0x20c/0x938) [ 800.882035][ T8946] r10:8580a400 r9:00000000 r8:00000000 r7:85900000 r6:85944000 r5:8594406c [ 800.882288][ T8946] r4:844e6000 [ 800.882395][ T8946] [<80887638>] (io_submit_sqes) from [<808882ec>] (sys_io_uring_enter+0x138/0x780) [ 800.882687][ T8946] r10:00000000 r9:8580a400 r8:00000000 r7:85505600 r6:00003516 r5:844e6000 [ 800.882926][ T8946] r4:00000000 [ 800.883034][ T8946] [<808881b4>] (sys_io_uring_enter) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 800.883333][ T8946] Exception stack(0xdf991fa8 to 0xdf991ff0) [ 800.883508][ T8946] 1fa0: 00000000 00000000 00000005 00003516 00000000 00000000 [ 800.883752][ T8946] 1fc0: 00000000 00000000 002e630c 000001aa 002d0000 00000000 00006364 76bd20bc [ 800.883979][ T8946] 1fe0: 76bd1ec0 76bd1eb0 0001939c 00131f30 [ 800.884168][ T8946] r10:000001aa r9:8580a400 r8:8020029c r7:000001aa r6:002e630c r5:00000000 [ 800.884406][ T8946] r4:00000000 [ 800.884674][ T8946] Code: e1a08002 e5912000 e50b2030 e1a05001 (e1d920be) [ 800.885745][ T8946] ---[ end trace 0000000000000000 ]--- [ 800.892994][ T8946] Kernel panic - not syncing: Fatal exception [ 800.894704][ T8946] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:27:42 Registers: info registers vcpu 0 CPU#0 R00=ffffffff R01=00000004 R02=000001e4 R03=00000000 R04=00000000 R05=00000000 R06=00000000 R07=00000000 R08=002d0000 R09=00000000 R10=00006364 R11=76be80bc R12=20005340 R13=20005340 R14=00019438 R15=00019438 PSR=20000010 --C- A S usr32 s00=206e6568 s01=64616572 d00=64616572206e6568 s02=54205b5d s03=36343938 d01=3634393854205b5d s04=6e55205d s05=656c6261 d02=656c62616e55205d s06=206f7420 s07=646e6168 d03=646e6168206f7420 s08=6b20656c s09=656e7265 d04=656e72656b20656c s10=554e206c s11=70204c4c d05=70204c4c554e206c s12=746e696f s13=64207265 d06=64207265746e696f s14=66657265 s15=6e657265 d07=6e65726566657265 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=fffff000 R01=002be000 R02=90f00000 R03=002be02f R04=84787900 R05=002be000 R06=e13f4fdf R07=04600000 R08=8452f300 R09=dece00ac R10=84787900 R11=df979dcc R12=84787900 R13=df979da8 R14=90f00000 R15=80230888 PSR=00000113 ---- A S svc32 s00=00000806 s01=00020100 d00=0002010000000806 s02=01b00800 s03=080f8003 d01=080f800301b00800 s04=c80303ff s05=00080019 d02=00080019c80303ff s06=0219d003 s07=80032080 d03=800320800219d003 s08=14800220 s09=00208803 d04=0020880314800220 s10=0302f208 s11=ff022090 d05=ff0220900302f208 s12=03ffffff s13=00209803 d06=0020980303ffffff s14=d8030008 s15=04080019 d07=04080019d8030008 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=19a80303 s33=03000800 d16=0300080019a80303 s34=080019b0 s35=19b80300 d17=19b80300080019b0 s36=03000800 s37=ff0219c0 d18=ff0219c003000800 s38=03ffffff s39=0019c803 d19=0019c80303ffffff s40=d0030008 s41=20800219 d20=20800219d0030008 s42=02208003 s43=88031480 d21=8803148002208003 s44=f2080020 s45=20900302 d22=20900302f2080020 s46=ffffff02 s47=980303ff d23=980303ffffffff02 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=fc7649d6 s53=18668488 d26=18668488fc7649d6 s54=ed87acea s55=ceb0c97f d27=ceb0c97fed87acea s56=c1a4c58f s57=613d256b d28=613d256bc1a4c58f s58=cb660589 s59=9969aba1 d29=9969aba1cb660589 s60=40474c85 s61=931fb386 d30=931fb38640474c85 s62=a080e69b s63=ed0aa081 d31=ed0aa081a080e69b FPSCR: 00000000